Police Dept Loses 10 Months of Work to Ransomware. Gets Infected a Second Time

Secret Service agents are now investigating the point of entry for both infections, hoping to find clues and track down the hackers. The first ransomware infection took place on April 23, last month and encrypted ten months worth of work data related to active investigations. Officials said they didn’t pay the ransom and were able to recover some of the data from previous backups.

Other data they recovered from public court records, but to this day, the Riverside Fire and Police department have not fully recovered from the first attack. The second infection took place last week, May 4, but only came to light today when US Secret Service agents arrived in the Ohio town to help with the investigation. This time around officials appear to have learned their lesson and were actively making backups on a daily basis.

Officials said the second ransomware infection only locked up data for the last eight hours of work, and the department fully recovered after the second attack.

Source: bleepingcomputer.com