Wayne County Michigan Faces Major INTERLOCK Ransomware Breach
Wayne County, Michigan, Hit by INTERLOCK Ransomware Attack
Wayne County, Michigan, a key governmental hub, has fallen victim to a significant ransomware attack orchestrated by the newly emerged INTERLOCK group. This attack has disrupted essential services and exposed vulnerabilities within the county's digital infrastructure.
Victim Profile: Wayne County, Michigan
Wayne County is a prominent region in Michigan, encompassing Detroit and serving as a vital center for government operations. The county employs between 1,001 and 5,000 individuals across various departments, including public health, safety, and economic development. Its strategic location near Detroit enhances its appeal for businesses, providing access to transportation networks and a large consumer market. However, this prominence also makes it a target for cybercriminals seeking to exploit its extensive digital infrastructure.
Attack Overview
The INTERLOCK ransomware group claims to have exfiltrated 7.7 TB of sensitive data from Wayne County, including 130 SQL databases, confidential criminal investigation files, and personal data of residents. The attack, which occurred on October 3, has severely disrupted county services, affecting critical systems at the Wayne County Sheriff’s Office, the Treasurer’s Office, and the Register of Deeds Office. Operations such as inmate bonding, online tax payments, and real estate records processing have been halted. The exact ransom demand remains undisclosed, but the county's IT team, in collaboration with the FBI and Michigan State Police, is actively investigating the breach.
INTERLOCK Ransomware Group
INTERLOCK is a newly identified ransomware group employing a double-extortion strategy. After infiltrating a victim’s network, the group encrypts key files and exfiltrates data, threatening to leak it if their demands are not met within a 96-hour deadline. This approach amplifies financial and reputational risks for victims. The group distinguishes itself by issuing stern warnings against file alterations or system reboots, which could cause irreversible damage. The exact method of penetration into Wayne County's systems remains under investigation, but it highlights the vulnerabilities in governmental digital infrastructures.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!