Posts

Ransomware Attacks Target Municipalities

If there’s one organization you tend to trust with your information, it’s the government. The truth is though that many municipalities are simply not doing enough to protect themselves, and your data. Ransomware attacks are targeting municipalities due to their valuable information and security vulnerabilities.

Canadians and American Municipalities Both Affected

The following are some of the Canadian cities that have had cyber attacks occur since 2018:

  •             Cambridge, ON, CAN
  •             Stratford, ON, CAN
  •             Wasaga Beach, ON, CAN
  •             Midland, ON, CAN
  •             Regina, SK, CAN
  •             Mekinac, QC, CAN

Recorded Future Blog compiled a list of American cities and public services hit by ransomware starting in 2013. The image below shows 2018 onwards, which is almost half of the list.

Table of US Municipalities that are Targets of Ransomware Attacks

Almost half of the ransomware attacks on US cities since 2013 have occurred in the past year and a half.

More Than Pennies

On May 7, 2019, the City of Baltimore, MD was attacked for the second time in 15 months. This resulted in disruptions to the city systems for over 2 weeks. The expected cost of the attack to Baltimore is $18.2M. The city now looks to rebuild their systems and make up for lost revenue. It is not hard to imagine that Canadian municipalities are also at increased risk for ransomware attacks.

Are You Prepared for the Consequences?

As a small business owner, or member of government, how long are you willing to allow your systems to be down for, and how much money are you prepared to lose? Have you considered the money lost during the time the business is down? The money required to rebuild critical systems? Ransomware attacks are becoming increasingly creative, and cities need to consider that any of the following could happen to them:

  • Locking out of city employees from email accounts
  • Locking out of city employees from phone systems
  • Shutdown of 911 system
  • Loss of police footage potentially affecting future cases
  • Inability to complete real estate transactions
  • Inability to pay parking tickets, taxes

Some Cities Are Stepping Up

In light of all of this, municipalities such as Fredericton, NB have taken steps to protect themselves by partnering with local companies to improve their cyber security and business continuity plans before a crippling cyberattack occurs. In this case, Fredericton approved spending of upwards of $100,000 per year for 3 years. With proper preparation, municipalities can better protect themselves and their citizens, and limit their damages and downtime in the event of an attack.

Proactive Dark Web Monitoring: What You Can Learn From The Target Corporation Data Breach

What is Your Business Continuity Plan?

Did you know, 40% of small businesses in the US never open their doors after a disaster? That’s a big number considering most small business owners not only rely solely on their business as a means of income, they also are emotionally attached to their business since it provides a way to present their skills to the world.

So if their business is so important to them, then why are many small business owners not doing enough to protect it from disasters? In a 2015 survey of 300 small businesses in Calgary, 47% of businesses said they do not have a business continuity or contingency plan in place. That’s a big number considering this survey was conducted not long after the 2013 floods.

Now, while no business would want to get hit by unexpected disasters, it does not mean that owners should not plan for them either. Business Continuity planning is the similar to yearly budget planning or even better: it is like getting insurance!

Think about it: many people get life insurance because they are looking out for their family’s future in case they are no longer around. If you are one of the family earners, you secure your family by getting life insurance. While the emotional pain of you being gone can never be filled, you try to mitigate at least the financial pain by taking out life insurance for them.

This is exactly what business continuity planning does. Like I said earlier, for many small business owners, their business may be the only source of income for them and they build an emotional attachment to this business and just like we do to our loved ones.

So wouldn’t you want to protect this business from any potential disasters?

Here are some helpful links from Calgary Chamber of Commerce and Calgary Emergency Management Agency (CEMA) that you can use to start thinking about business continuity planning:

  1. CEMA’s Business Continuity Handbook
  2. Business Continuity Planning Template
  3. Reference Guide for examples

Contact us if you need some guidance on how to incorporate your IT related assets in the Business Continuity Plan.