💰💣
Baltimore City Security Incident
7/05/2019
2271 days ago
Resolved
Incident Overview
Situation Description
Baltimore City experienced a ransomware attack on May 7, 2019, which significantly disrupted its computer systems and services.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
GovernmentGeographic Scope
LocalResponse Actions
Revoked Credentials & Forced Resets
Restored Systems from Secure Backups
Took Systems or Services Offline
Managed Public Narrative & Crisis Communications
Revised Incident Response Plan
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$18,200,000 USDRecords Affected
0Data Types Compromised
PII (Personally Identifiable Information)
Financial Data (Credit Cards, Bank Accounts)
PHI (Protected Health Information)
Primary Impacts
Operational Disruption
Financial Loss
Reputational Damage
Key Decisions Made
Baltimore City officials are expecting to re-authenticate nearly 90 percent of employees with new passwords by the end of the week.; Baltimore City is implementing a manual workaround for property sales to continue operations during the technology outage.; Baltimore City's IT team will slowly bring computer systems back online to ensure better security following the ransomware attack.
Technical Analysis
Attack Method
Unpatched Vulnerability
Vulnerability / Tool
EternalBlue
Additional Information
Quick Facts
- Company:
- Baltimore City
- Date:
- 7/05/2019
- Status:
- Resolved
- Decision Maker:
- Baltimore City officials
- Position:
- nan
- Published:
- 5/06/2019
Source Information
Original Query
timeline of company actions after discovering ransomwareTimeline
Information Published
5/06/2019
Incident Occurred
7/05/2019 (2271 days ago)
Status: Resolved
Estimated resolution based on age