Oakland Hit by Ransomware Attack, City Systems Taken Offline
The City of Oakland has fallen victim to a ransomware attack, forcing officials to take critical IT systems offline as they work to contain the breach and restore services. The incident, which began on the night of February 8, has disrupted non-emergency systems, including voicemail and other municipal services, though core functions such as 911, fire, and emergency response remain operational.
Oakland’s government confirmed the attack in a notice posted late last week, stating that the Information Technology Department (ITD) is coordinating with law enforcement to assess the scope and severity of the intrusion. As a precaution, affected systems were taken offline to prevent further damage, though the city has warned residents to expect delays in services.
Five days into the incident, officials are still developing a response plan. While the city has not disclosed which hacking group is responsible or whether a ransom demand was made, the standard tactic of taking systems offline suggests attackers may have already exfiltrated sensitive data. If negotiations fail, such data is often leaked or sold on dark web forums.
The attack highlights the ongoing vulnerability of municipal networks to ransomware, with local governments increasingly targeted by cybercriminals. Oakland’s response remains under close monitoring as recovery efforts continue.
Source: https://www.bitdefender.com/en-gb/blog/hotforsecurity/city-of-oakland-hit-by-ransomware
City of Oakland cybersecurity rating report: https://www.rankiteo.com/company/oakland
"id": "OAK1787639165",
"linkid": "oakland",
"type": "Ransomware",
"date": "11/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'residents',
'industry': 'municipal services',
'location': 'Oakland',
'name': 'City of Oakland',
'type': 'government'}],
'customer_advisories': 'residents warned to expect delays in services',
'data_breach': {'data_exfiltration': 'possible'},
'date_detected': '2024-02-08',
'description': 'The City of Oakland has fallen victim to a ransomware attack, '
'forcing officials to take critical IT systems offline as they '
'work to contain the breach and restore services. The incident '
'has disrupted non-emergency systems, including voicemail and '
'other municipal services, though core functions such as 911, '
'fire, and emergency response remain operational.',
'impact': {'operational_impact': 'delays in services',
'systems_affected': 'non-emergency systems, including voicemail '
'and other municipal services'},
'investigation_status': 'ongoing',
'ransomware': {'data_exfiltration': 'possible'},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'public notice posted',
'containment_measures': 'affected systems taken offline',
'law_enforcement_notified': 'yes'},
'title': 'Oakland Hit by Ransomware Attack, City Systems Taken Offline',
'type': 'ransomware'}