San Bernardino County Pays Over $1M in Ransomware Attack

Posted by:

|

On:

|

According to the San Bernardino Sun, San Bernardino County in California paid a ransom of $1.1 million to a hacker who had compromised the computer system of the county’s sheriff department. However, the county’s financial losses were partially mitigated by an insurance policy specifically designed to cover events of this nature, resulting in a payout of $511,852, according to a county spokesperson.

The attack occurred in early April 2023 and resulted in the encryption of “many of the department’s systems,” which prevented access to them. One system in particular that could not be accessed was the California Law Enforcement Telecommunications System (CLETS). CLETS allows deputies to look up whether a person is wanted for crimes in the county or elsewhere, so a workaround was implemented and deputies asked other agencies to run the checks.  

The county initially refused to pay the ransom but later decided to do so after realizing the severity of the situation and the potential risk to public safety.

The county’s decision to pay the ransom has sparked controversy, with some experts arguing that it sets a dangerous precedent and could encourage more attacks in the future. Others, however, suggest that the county had little choice and that paying the ransom was the “responsible choice” to recover the encrypted data.

The San Bernardino Couty Sherrif’s Department and the FBI are currently investigating the attack.