Murray County: UPDATE: Murray County pays $200k to ransomware attackers to ‘resolve’ cyber breach

Murray County Pays $200K Ransom After Ransomware Attack Disrupts Government Systems

Murray County, Georgia, paid a $200,000 ransom to resolve a ransomware attack that struck its government systems on Wednesday, May 13, causing widespread disruptions. The incident locked county officials out of critical data and computing resources, prompting the decision to pay the ransom to prevent the publication of sensitive public records and restore services.

The attack impacted multiple county offices, including the Tax Commissioner, Tax Assessor, Probate Court, and Juvenile Court, which remained closed until systems were restored. While 911, public safety, and first responder operations remained fully functional, other county services experienced limited functionality. Voting operations continued as scheduled.

Sole Commissioner Noah Bishop stated that the payment was made using the county’s reserve funds, with no impact on the 2026 budget, payroll, or pending projects. The decision was guided by a team of nationally recognized cybersecurity and forensic consultants, who advised that paying the ransom was the most effective way to protect resident data.

Lemon Williams, CEO of the Ionado Group, a Chattanooga-based cybersecurity firm, described the attack as a "digital hijacking," where criminals encrypt data and demand payment for its release. He noted that such attacks have surged in frequency and sophistication, increasing hundreds of percent year-over-year as cybercriminals leverage advancing technology.

Bishop assured residents that the county has taken "aggressive measures" to prevent future incidents, though he acknowledged that no system is entirely immune to evolving threats. The attack highlights the growing risk ransomware poses to municipalities, governments, and critical infrastructure, where disruptions can affect essential services like emergency response, court proceedings, and public records.

Source: https://www.local3news.com/local-news/update-murray-county-pays-200k-to-ransomware-attackers-to-resolve-cyber-breach/article_30ea1b2c-a00f-44cc-a497-cf4ff474f860.html

Murray County (GA) Industrial Development Authority cybersecurity rating report: https://www.rankiteo.com/company/murray-county-ga-industrial-development-authority

"id": "MUR1781317422",
"linkid": "murray-county-ga-industrial-development-authority",
"type": "Ransomware",
"date": "5/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Residents of Murray County',
                        'industry': 'Public Sector',
                        'location': 'Georgia, USA',
                        'name': 'Murray County',
                        'type': 'Government'}],
 'data_breach': {'data_encryption': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive public records'},
 'date_detected': '2024-05-13',
 'description': 'Murray County, Georgia, paid a $200,000 ransom to resolve a '
                'ransomware attack that struck its government systems on '
                'Wednesday, May 13, causing widespread disruptions. The '
                'incident locked county officials out of critical data and '
                'computing resources, prompting the decision to pay the ransom '
                'to prevent the publication of sensitive public records and '
                'restore services.',
 'impact': {'data_compromised': 'Sensitive public records',
            'financial_loss': '$200,000',
            'operational_impact': 'County offices closed, limited '
                                  'functionality for county services',
            'systems_affected': 'Tax Commissioner, Tax Assessor, Probate '
                                'Court, Juvenile Court systems'},
 'lessons_learned': 'No system is entirely immune to evolving threats; '
                    'ransomware attacks on municipalities and governments are '
                    'increasing in frequency and sophistication.',
 'motivation': 'Financial gain',
 'post_incident_analysis': {'corrective_actions': 'Aggressive measures to '
                                                  'prevent future incidents'},
 'ransomware': {'data_encryption': 'Yes',
                'data_exfiltration': 'Threatened publication of sensitive data',
                'ransom_demanded': '$200,000',
                'ransom_paid': '$200,000'},
 'recommendations': 'Implement aggressive cybersecurity measures, engage '
                    'cybersecurity consultants, and prepare for potential '
                    'ransomware attacks.',
 'references': [{'source': 'Incident description'}],
 'response': {'recovery_measures': 'Restoration of systems and data',
              'remediation_measures': 'Payment of ransom, aggressive measures '
                                      'to prevent future incidents',
              'third_party_assistance': 'Nationally recognized cybersecurity '
                                        'and forensic consultants, Ionado '
                                        'Group'},
 'title': 'Murray County Ransomware Attack',
 'type': 'Ransomware'}