Ransomware
Ransomware is a type of malware in which hackers access files and encrypt them, demanding payment to restore access. Coverage includes ransomware attacks on cities, states, schools and public utilities, as well as legislative efforts to curb the threat and set policy on how to respond.
-
The Internet Crime Complaint Center identified more than 2,100 ransomware incidents in 2025 directed at U.S. critical infrastructure, including health care, energy and critical manufacturing, among other sectors.
-
A school district in Minnesota shut down its systems, contacted third-party cybersecurity experts and started working with law enforcement Monday after an unauthorized party accessed the network.
-
After a ransomware incident in January, officials made changes including updating IT protocols. A second attack this week took affected systems offline, but not 911 and emergency services.
More Stories
-
Following the county’s second such attack this year, Minnesota’s National Guard will provide cyber protection support. The more recent incident was continuing to impact emergency and municipal services Tuesday.
-
A ransomware attack in January in New Britain, Conn., and an attempted “interruption” in Meriden in February highlight the ongoing cybersecurity threat to municipalities and others.
-
The city currently cannot process some online credit card payments, because of a cyber attack on one of its payment gateway providers. Officials are working to stand up a secure alternative solution.
-
While overall ransomware attack numbers remained steady, higher education institutions drove a sharp rise in exposed records, fueled in part by third-party software vulnerabilities.
-
The third-party payment processing vendor, BridgePay Network Solutions, is reporting a systemwide outage to its services following a ransomware attack. An investigation and recovery efforts are ongoing.
-
A school district in Pennsylvania canceled classes Tuesday, Wednesday and Thursday this week while it investigates and isolates a ransomware virus, which did not appear to have come from a local source.
-
The Georgia Superior Court Clerks’ Cooperative Authority has said it found an intrusion Nov. 21 and “immediately activated” defensive controls. The organization was able to interrupt the incursion underway.
-
Public- and private-sector security leaders examined trends in cyber threats at the recent California Cybersecurity Education Summit. During an attack, one said, responding quickly is still very important.
-
The city will make settlements to current and former police officers and workers whose personal information was compromised by a 2023 ransomware attack. The incident, a data breach, impacted basic services for weeks.
-
An August ransomware attack on the state Department of Transportation exposed personal data and disrupted bus services. Officials are working to bolster the resilience of their systems and have not paid a ransom.
-
The matter impacted the state Department of Transportation and has, the Maryland Transit Administration said, resulted in “incident-related data loss.” Real-time bus tracking is unavailable on some routes.
-
The Sophos State of Ransomware in Education 2025 report indicates that while smaller ransoms and faster recovery demonstrate progress, phishing, stolen data, and staff burnout keep schools at risk.
-
The education sector has seen a swift rise in cybersecurity incidents since 2024, but training, awareness and tools can help ease incidents and response time.
-
Las Vegas police have announced the arrest of a teenager, not identified because he is a minor, on suspicion of committing a “sophisticated” cyber attack that MGM Resorts said cost it $100 million.
-
Online access has been restored at city libraries and recreation centers, following a full system shutdown in the wake of a July ransomware attack. Safeguards include segmentation and simplified logins.
-
The state Office of Attorney General confirmed a cyber attack that encrypted files in an attempt to seek a ransom was behind website, email and phone outages last month. The office has not paid, it said.
-
An entity has claimed responsibility for the Sept. 4 cyber attack on the Orleans Parish Sheriff’s Office. It’s not clear whether it has demanded a ransom, but leaders are working “around the clock” on a restoration.
-
Following a new state mandate that municipalities update IT policies, village officials are mulling a new cybersecurity policy. Its precise details, due to state requirement, may not be publicly available.
Most Read