LockBit3 Ransomware Attack on Frederick County Government

Victim Profile

Frederick County, a local government entity serving approximately 15,000 residents, has become the latest victim of the LockBit3 ransomware group. The county's economy is diversified, encompassing agriculture, manufacturing, and healthcare sectors. Its official website is a crucial portal for residents, offering access to a wide range of services including public works, finance, and health and safety information.

Vulnerabilities and Impact

The LockBit3 ransomware attack has led to significant disruptions within Frederick County's IT systems by encrypting data and demanding a $200,000 ransom to prevent the publication of the stolen data. This incident is part of a worrying trend, as the LockBit group has been credited with 50 ransomware incidents in June 2022 alone, demonstrating an increased focus on smaller municipalities by sophisticated ransomware operators.

Investigation and Response

In response to the cyberattack, Frederick County has engaged with digital forensics and incident response specialists to conduct a thorough investigation. As of now, the county has not disclosed any intentions to comply with the ransom demand, focusing instead on efforts to recover and secure their IT infrastructure.

The LockBit3 ransomware attack on Frederick County is a stark reminder of the escalating ransomware threat facing local governments. It emphasizes the critical importance of implementing comprehensive cybersecurity strategies to protect public sector entities from such malicious activities.

Sources

• Frederick County Government Website - https://frederickco.gov/
• Frederick County CivicAlerts
• Frederick Investigates Unauthorized Activity on Town's Computer Network
• Ransomware Group Says It Has Breached Colorado Town's Network
• Colorado Police Investigating Ransomware Attack on Small Town