Cullman County Commission Hit by BlackSuit Ransomware Attack

Incident Date: Nov 24, 2024

Attack Overview
VICTIM
Cullman County Commission
INDUSTRY
Government
LOCATION
USA
ATTACKER
Black Suit
FIRST REPORTED
November 24, 2024

Ransomware Attack on Cullman County Commission by BlackSuit Group

The Cullman County Commission, a governmental entity in Alabama, fell victim to a ransomware attack orchestrated by the BlackSuit group. The attack, which targeted the County Courthouse, disrupted operations at the Revenue, Probate, and District Attorney’s offices. Phone lines were disabled, and online services for property tax and tag renewal payments were rendered unavailable.

Company Profile

The Cullman County Commission operates as a local governing body in Alabama, overseeing various administrative functions and public services within Cullman County. The commission is comprised of five elected commissioners representing specific districts, responsible for legislative authority, budget management, public services oversight, economic development, and community engagement.

Key Information

The Cullman County Commission has between 11 to 50 employees, typical for local government entities. The commission's revenue primarily comes from state and federal allocations, property taxes, and other local revenue sources. The strategic location of the commission between major cities like Huntsville and Birmingham has contributed to its growth and importance in the region.

Attack Overview

The ransomware attack on the Cullman County Commission by the BlackSuit group resulted in the disruption of critical operations at the County Courthouse. The attack impacted multiple offices within the commission, leading to the disabling of phone lines and online services for tax and tag renewal payments. The FBI was involved in the response to the incident, and investigations are ongoing to determine the extent of the breach.

Ransomware Group Profile

The BlackSuit ransomware group is known for its sophisticated tactics and targeting of various sectors, including government entities. The group distinguishes itself through its advanced techniques for data exfiltration and extortion, without relying on traditional encryption methods. BlackSuit has been implicated in numerous attacks globally, prompting advisories from cybersecurity agencies.

Potential Vulnerabilities

The Cullman County Commission, as a government entity handling sensitive information, may have been targeted by threat actors like the BlackSuit group due to the critical services it provides to the community. Vulnerabilities in the commission's systems, such as compromised credentials or unpatched software, could have allowed the ransomware group to gain access and carry out the attack.

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.