{"id":700,"date":"2023-05-03T23:42:00","date_gmt":"2023-05-04T04:42:00","guid":{"rendered":"https:\/\/kentprotect.com\/?p=700"},"modified":"2023-05-04T05:58:07","modified_gmt":"2023-05-04T10:58:07","slug":"breach-report-city-of-dallas-royal-ransomware-report-pending","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-city-of-dallas-royal-ransomware-report-pending\/","title":{"rendered":"Breach Report: City of Dallas Royal ransomware report pending"},"content":{"rendered":"
<\/div>\n

Pending<\/em> investigation and update from the City of Dallas<\/em><\/p>\n\n\n\n

One-sentence summary: <\/strong><\/p>\n\n\n\n

The City of Dallas was attacked by the Royal ransomware group in May 2023, affecting hundreds of city and police department IT systems. <\/p>\n\n\n\n

Who was involved?<\/strong><\/p>\n\n\n\n

The City of Dallas and its services, including the Dallas Police Department, Dallas Fire Department, the Dallas Public Library system, Dallas Court & Detention Services, and the Royal ransomware group. <\/p>\n\n\n\n

What was the timeline?<\/strong><\/p>\n\n\n\n

May 3, 2023: The City of Dallas detects the ransomware attack and begins its incident response<\/p>\n\n\n\n

What occurred?<\/strong><\/p>\n\n\n\n

The City of Dallas detected a ransomware attack in progress early morning on Wednesday, May 3, 2023, conducted by the Royal ransomware group (Lyngaas, 2023; Abrams, 2023). City and police IT systems and online services are affected, including the police department’s and fire department’s websites, which are experiencing a complete outage either from compromise or the incident response (Lyngaas, 2023; Brown, 2023). The Dallas online municipal court system is down, and jury trials have been canceled (Brown, 2023). The Dallas Police Department is currently taking calls via its existing radio system instead of via computer (Brown, 2023). Ransom notes have been reported to have been printed by the Royal ransomware group with the city’s printers (Abrams, 2023). The investigation is still in progress, and the results will be completed here. <\/p>\n\n\n\n

Estimated costs:<\/strong><\/p>\n\n\n\n

Incident response costs, operational costs due to outages of IT infrastructure<\/p>\n\n\n\n

Involved laws: <\/strong><\/p>\n\n\n\n

Pending<\/p>\n\n\n\n

Root cause: <\/strong><\/p>\n\n\n\n

TBA or N\/A (see disclaimer)<\/p>\n\n\n\n

Lessons learned: <\/strong><\/p>\n\n\n\n

TBA or N\/A (see disclaimer)<\/p>\n\n\n\n

Sources: <\/strong><\/p>\n\n\n\n

Abrams, L. (2023, May 3). City of Dallas hit by Royal ransomware attack impacting IT services. BleepingComputer<\/em>. https:\/\/www.bleepingcomputer.com\/news\/security\/city-of-dallas-hit-by-royal-ransomware-attack-impacting-it-services\/<\/p>\n\n\n\n

Brown, L. (2023, May 4). City of Dallas impacted by ransomware attack, police computer dispatch system down. FOX 4 News Dallas-Fort Worth<\/em>. https:\/\/www.fox4news.com\/news\/city-of-dallas-hit-with-ransomware-attack<\/p>\n\n\n\n

CBS Texas. (2023, May 3). Ransomware attack hampering Dallas police operations. CBS News<\/em>. https:\/\/www.cbsnews.com\/texas\/news\/possible-cyber-attack-hampering-dallas-police-operations\/<\/p>\n\n\n\n

City of Dallas (dmagstatic.com). (2015, August). dcvb-logo.jpg<\/em>. dmagstatic.com. https:\/\/assets.dmagstatic.com\/wp-content\/uploads\/2015\/08\/dcvb-logo.jpg<\/p>\n\n\n\n

Lyngaas, S. (2023, May 3). Ransomware attack on City of Dallas knocks police website offline. CNN<\/em>. https:\/\/www.cnn.com\/2023\/05\/03\/politics\/ransomware-dallas-police-department\/index.html<\/p>\n\n\n\n

\n