Town of St. Marys

The staff of the Canadian town of St. Marys, Ontario, was locked out of internal systems and its data was encrypted data by the LockBit ransomware group that targeted the town in a ransomware attack.

LockBit’s dark website listed townofstmarys.com as a victim of ransomware and previewed files that had data stolen and encrypted from them.

The group demanded ransom from the town which they did not pay after which they shared screenshots of the file structure of a Windows operating system, containing directories corresponding to municipal operations like finance, health and safety, sewage treatment, property files, and public works.

The town is apparently dedicated resources to unlocking IT systems and restoring backup data.

Source: https://www.theverge.com/2022/7/22/23274372/st-marys-canada-lockbit-ransomware-cyber-incident

TPRM report: https://www.rankiteo.com/company/town-of-st-marys

"id": "tow03226722",
"linkid": "town-of-st-marys",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Government',
                        'location': 'St. Marys, Ontario, Canada',
                        'name': 'St. Marys, Ontario',
                        'type': 'Municipality'}],
 'attack_vector': 'Unknown',
 'data_breach': {'data_encryption': True,
                 'data_exfiltration': True,
                 'type_of_data_compromised': ['Municipal operations files']},
 'description': 'The staff of the Canadian town of St. Marys, Ontario, was '
                'locked out of internal systems and its data was encrypted '
                'data by the LockBit ransomware group that targeted the town '
                'in a ransomware attack.',
 'impact': {'data_compromised': ['Municipal operations files including '
                                 'finance, health and safety, sewage '
                                 'treatment, property files, and public works'],
            'systems_affected': ['Internal systems']},
 'motivation': 'Financial gain',
 'ransomware': {'data_encryption': True,
                'data_exfiltration': True,
                'ransom_demanded': True,
                'ransomware_strain': 'LockBit'},
 'response': {'remediation_measures': ['Unlocking IT systems',
                                       'Restoring backup data']},
 'threat_actor': 'LockBit ransomware group',
 'title': 'Ransomware Attack on St. Marys, Ontario',
 'type': 'Ransomware'}