St. George Fire Protection District Sues Cybersecurity Firm Over 2023 Breach
The St. George Fire Protection District has filed a lawsuit against Baton Rouge-based cybersecurity firm General Informatics, alleging negligence in preventing a December 2023 breach that left its network compromised. Hackers infiltrated the district’s systems using a "living off the land" attack, exploiting legitimate network tools to evade detection, escalate privileges, and potentially deploy ransomware or gain access to other municipal networks.
The attack, first reported by law enforcement on December 23, 2023, targeted the district’s domain controllers critical servers that manage authentication and security allowing attackers to impersonate authorized users and move freely within the network. Investigators later discovered the same hackers had breached another unnamed East Baton Rouge agency, also a General Informatics client, responsible for coordinating emergency services via computer-aided dispatch.
The lawsuit claims General Informatics failed to secure its remote access tools, reusing compromised credentials across clients even after being notified of the breach in November 2023. A five-month review by Louisiana’s Emergency Support Function-17 uncovered additional vulnerabilities, including unsegmented networks, unlogged firewall activity, and administrative credentials stored in plain text. The firm also allegedly installed high-speed internet without compatible network switches and neglected to back up the district’s servers, despite contractual obligations.
Following the breach, the fire district was forced to rebuild its entire network, incurring costs for new hardware and security measures. General Informatics later billed the district for remediation efforts and legal fees before filing a motion to compel arbitration. The case highlights systemic failures in cybersecurity practices and the risks of third-party vendor oversight in critical infrastructure.
Source: https://www.govtech.com/security/louisiana-fire-district-sues-cybersecurity-firm-after-hack
St. George Fire Department cybersecurity rating report: https://www.rankiteo.com/company/stgeorgefiredepartment
General Informatics LLC cybersecurity rating report: https://www.rankiteo.com/company/general-informatics-llc
"id": "STGGEN1781022312",
"linkid": "stgeorgefiredepartment, general-informatics-llc",
"type": "Cyber Attack",
"date": "12/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Public Safety/Emergency Services',
'location': 'East Baton Rouge, Louisiana, USA',
'name': 'St. George Fire Protection District',
'type': 'Government (Fire Protection District)'},
{'industry': 'Public Safety/Emergency Services',
'location': 'East Baton Rouge, Louisiana, USA',
'name': 'Unnamed East Baton Rouge Agency',
'type': 'Government (Emergency Services)'}],
'attack_vector': 'Living off the Land (LotL)',
'date_detected': '2023-12-23',
'description': 'The St. George Fire Protection District filed a lawsuit '
'against cybersecurity firm General Informatics, alleging '
'negligence in preventing a December 2023 breach. Hackers used '
"a 'living off the land' attack to infiltrate the district’s "
'systems, exploiting legitimate network tools to evade '
'detection, escalate privileges, and potentially deploy '
'ransomware or access other municipal networks. The attack '
'targeted domain controllers, allowing attackers to '
'impersonate authorized users. The same hackers breached '
'another unnamed East Baton Rouge agency, also a General '
'Informatics client.',
'impact': {'brand_reputation_impact': 'Negative impact on trust in '
'cybersecurity practices and '
'third-party vendor oversight',
'financial_loss': 'Costs for new hardware and security measures, '
'remediation and legal fees billed by General '
'Informatics',
'legal_liabilities': 'Lawsuit filed against General Informatics, '
'potential regulatory fines',
'operational_impact': 'Forced to rebuild entire network, potential '
'disruption to emergency services '
'coordination',
'systems_affected': 'Domain controllers, network infrastructure, '
'emergency services coordination systems'},
'initial_access_broker': {'entry_point': 'Insecure remote access tools, '
'compromised credentials',
'high_value_targets': 'Domain controllers, '
'emergency services '
'coordination systems'},
'investigation_status': 'Completed (five-month review by Louisiana’s '
'Emergency Support Function-17)',
'lessons_learned': 'Systemic failures in cybersecurity practices, risks of '
'third-party vendor oversight, importance of network '
'segmentation, secure credential management, and proper '
'logging of firewall activity',
'post_incident_analysis': {'corrective_actions': 'Rebuilt network, '
'implemented new hardware '
'and security measures, '
'potential improvements in '
'vendor oversight and '
'cybersecurity practices',
'root_causes': 'Negligence by General Informatics, '
'including failure to secure remote '
'access tools, reuse of compromised '
'credentials, unsegmented networks, '
'unlogged firewall activity, '
'plain-text administrative '
'credentials, and lack of server '
'backups'},
'ransomware': {'data_encryption': 'Potential (not confirmed)',
'data_exfiltration': 'Potential (not confirmed)'},
'recommendations': 'Implement network segmentation, enforce secure credential '
'storage, enable firewall logging, ensure proper backup '
'procedures, avoid reusing compromised credentials, and '
'conduct regular security audits for third-party vendors',
'references': [{'source': 'St. George Fire Protection District Lawsuit'}],
'regulatory_compliance': {'legal_actions': 'Lawsuit filed by St. George Fire '
'Protection District against '
'General Informatics'},
'response': {'law_enforcement_notified': 'Yes',
'network_segmentation': 'Identified as a missing measure',
'remediation_measures': 'Rebuilt entire network, implemented new '
'hardware and security measures',
'third_party_assistance': 'Louisiana’s Emergency Support '
'Function-17 conducted a five-month '
'review'},
'title': 'St. George Fire Protection District Cybersecurity Breach Lawsuit',
'type': 'Data Breach, Potential Ransomware',
'vulnerability_exploited': 'Compromised credentials, unsegmented networks, '
'unlogged firewall activity, administrative '
'credentials stored in plain text, insecure remote '
'access tools'}