clear
Wednesday December 13th, 2017 2:10AM

Ransomware slows North Carolina county government to a crawl

By The Associated Press
Related Articles
  Contact Editor

A cyberattack slowed county government to a crawl Wednesday in North Carolina's most populous metro area as deputies processed jail inmates by hand, the tax office turned away electronic payments and building code inspectors switched to paper records.

Data was frozen on dozens of Mecklenburg County servers after one of its employees opened an email attachment carrying malicious software earlier this week.

County manager Dena Diorio said late Wednesday that the county will not pay the $23,000 demanded by the hacker believed to be in Ukraine or Iran. Diorio said it would have taken days to restore the county's computer system even if officials paid off the person controlling the ransomware, so the decision won't significantly lengthen the timeframe.

"I am confident that our backup data is secure and we have the resources to fix this situation ourselves," said Diorio.

In the meantime, county departments were scrambling to conduct business without access to digital records.

"We are slower, but we are up and running," Diorio said.

The county of more than 1 million residents includes Charlotte, but the city government appears not to have been compromised by the attack. The state's largest city issued a statement that its separate computer systems have not been affected and that it severed direct connections to county computers.

The computer problems haven't affected the processing of emergency calls because they are handled by the city, said Mecklenburg County Sheriff's Office spokeswoman Anjanette Flowers Grube.

But it's caused delays for the county jail and disrupted other county services ranging from domestic violence counseling to tax collection. Sheriff Irwin Carmichael said it's taking longer to manually process arrestees, as well as inmates due to be released.

Calls to a county domestic violence hotline are rolling straight to voicemail, so counselors are checking messages every 15 minutes, officials told reporters. And the social services department is working to recreate its daily itinerary of 1,600 rides for elderly patients with medical appointments. Recurring appointments that account for most of the rides are less of a problem than those for patients who make one-time reservations.

Patty Eagan, director of Mecklenburg County Social Services, said there are "300 trips that are medical demand, and that's when someone has scheduled a trip a week ago, two weeks ago. We are not able to see what trips have been scheduled."

Meanwhile, payments to the tax office must be made with a check, cash or money order, and code inspectors are slowed down by using paper records, according to a list of affected services.

Diorio said county computers began to suffer Monday from the attack, which was publicly revealed the next day. A forensic examination shows 48 of the county's 500 servers were affected, Diorio said, adding that county government officials believe that the hacker wasn't able to gain access to individuals' health, credit card or social security information.

The compromised servers have been quarantined, and even potentially healthy parts of the system were shut down to avoid spreading the malicious program, said Keith Gregg, the county's chief information officer. But without getting the compromised servers unlocked, the county will have to rebuild significant parts of the system.

Diorio said county technology officials will use backup data from before the ransomware attack to restore the system, but the rebuild will take "patience and hard work."

A security expert said cyberattacks on local governments aren't unusual. For example, a hacking attack in late 2016 on San Francisco's mass transit system led its operators to allow free rides over part of a weekend because of data problems.

Ross Rustici, senior director of intelligence services at the firm Cybereason, said ransomware schemes against local governments make the news every couple of months, but that they often tend to be smaller, rural areas. He said local governments are "easy targets" because of their older equipment and software.

He said businesses and local governments often pay the ransom because other means of recovering the data can be even more expensive.

"Once you're in that situation, you really have no good option, so a lot of people and companies end up paying," he said.

___

Drew reported from Raleigh, North Carolina.

___

Follow Drew at www.twitter.com/JonathanLDrew

  • Associated Categories: U.S. News, Associated Press (AP), AP National News, Top U.S. News short headlines, AP Business, AP Technology News
© Copyright 2017 AccessWDUN.com
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
'Not a drill': Students hid in classrooms as shooter kills 2
A shooter killed two classmates at a New Mexico high school as students hid in their classrooms or in closets
11:49PM ( 18 minutes ago )
Wildfire destroys mobile homes in California retirement park
A brush fire driven by gusty winds that have plagued Southern California all week exploded rapidly Thursday and destroyed dozens of trailer homes in a retirement community north of San Diego
11:46PM ( 21 minutes ago )
Elite thoroughbred race horses killed in California wildfire
Elite thoroughbred race horses used their speed to sprint away from flames Thursday as a one of California's major wildfires tore through a training center in San Diego County
11:42PM ( 26 minutes ago )
U.S. News
The Latest: Franken steps down, takes shot at Trump
Sen. Al Franken has reluctantly announced he's resigning from Congress, succumbing to a torrent of sexual harassment allegations
12:05AM ( 3 minutes ago )
Japan economy gains momentum, grows 2.5 percent in July-Sept
Japan reports its economy grew at a 2.5 percent annual pace in July-September, upgrading an earlier estimate of 1.4 percent growth
11:55PM ( 12 minutes ago )
Jones makes game-saving catch, Falcons beats Saints 20-17
Deion Jones made an interception in the end zone with 1:25 remaining and the Atlanta Falcons held on for a crucial 20-17 victory over the New Orleans Saints, setting up a three-way race for the title in the NFC South
11:33PM ( 35 minutes ago )
Associated Press (AP)
US team still planning for Olympics despite confusion
US Team still planning for Olympics in Korea despite doubts brought on by Trump administration
9:47PM ( 2 hours ago )
Oklahoma QB Baker Mayfield named the AP Player of the Year
Oklahoma quarterback Baker Mayfield is The Associated Press college football Player of the Year
9:07PM ( 3 hours ago )
Longtime Washington state medical marijuana activist dies
JoAnna McKee, a pioneering medical marijuana activist in Washington state, has died at age 74
8:59PM ( 3 hours ago )
AP National News
Michigan doctor gets 60-year prison sentence for child porn
A former elite Michigan sports doctor who possessed child pornography and assaulted gymnasts has been sentenced to 60 years in federal prison in one of three criminal cases that ensures he won't ever be free
6:09PM ( 5 hours ago )
The Latest: Fire text alert sent to 12 million Californians
A text alert about dangerous fire weather conditions that was sent to 12 million Southern Californians in seven counties was the widest ever issued by the state Office of Emergency Services
5:53PM ( 6 hours ago )
US fails to enforce smog rules, 14 states allege in lawsuit
Fourteen states and the District of Columbia are suing the Trump administration over what they say is a failure to enforce smog standards
5:52PM ( 6 hours ago )
Top U.S. News short headlines
Brown out: Browns fire VP, coach Jackson keeps job for '18
Winless Browns fire top executive Sashi Brown, but coach Hue Jackson will be back in 2018 despite 1-27 record
9:57PM ( 2 hours ago )
Browns hire former Chiefs executive Dorsey as new GM
Browns hire former Chiefs general manager John Dorsey to run their front office
9:51PM ( 2 hours ago )
Trade for Dee Gordon may help Mariners land Shohei Ohtani
Landing Dee Gordon via trade is an immediate upgrade for the Seattle Mariners but an extra $1 million in international signing bonus pool allocation may prove more important in trying to land Japanese star Shohei Ohtani
8:56PM ( 3 hours ago )
AP Business
Bitcoin soars then falls back; banks raise risk concerns
Bitcoin surges but then falls sharply; banks raise concern about risk ahead of the debut of bitcoin futures next week
1:07PM ( 11 hours ago )
Bitcoin tops $17,000; hack raises concerns ahead of US trade
Bitcoin topped $17,000, while a hacking at a bitcoin mining company raises new concerns about the security of digital currencies.
11:18AM ( 12 hours ago )
Bitcoin tops $15,000; hack raises concerns ahead of US trade
Bitcoin topped $15,000, while a bitcoin mining company says it is investigating a hacking and the theft of currency reportedly worth as much as $70 million.
10:05AM ( 14 hours ago )
AP Technology News
'Not a drill': Students hid in classrooms as shooter kills 2
A shooter killed two classmates at a New Mexico high school as students hid in their classrooms or in closets
11:49PM ( 19 minutes ago )
Wildfire destroys mobile homes in California retirement park
A brush fire driven by gusty winds that have plagued Southern California all week exploded rapidly Thursday and destroyed dozens of trailer homes in a retirement community north of San Diego
11:46PM ( 22 minutes ago )
Elite thoroughbred race horses killed in California wildfire
Elite thoroughbred race horses used their speed to sprint away from flames Thursday as a one of California's major wildfires tore through a training center in San Diego County
11:42PM ( 26 minutes ago )
Ex-priest convicted of murdering Texas woman in 1960
A former priest has been convicted of the 1960 slaying of a South Texas teacher and one-time beauty queen who was a member of the parish he served
10:50PM ( 1 hour ago )
The Latest: Elite race horses die in California wildfire
A California wildfire tore through a training center for elite race horses in San Diego County, killing some
10:37PM ( 1 hour ago )