Recent cyber attacks on Cities

A review of the reported incidents on Hackmageddon shows that there are a variety of City / Public Services attacks emerging.

TargetOverviewAttack Types / Vector
Sunderland City CouncilHackers access users’ personal details in a cyber attack on Sunderland City Council’s library database.Data Breech, Compromise, Access
Louisville Regional Airport Authority (LRAA)Is hit by a ransomware attack.Phishing, Initial Access.
Broome CountyAn employee email account was compromised between Nov. 20, 2018, and Jan. 2.Phishing, Initial Access, Credential Harvesting.
Riviera BeachRiviera Beach agrees to pay $600,000 in ransom to hackers who took over its computer system in a ransomware attack.Malware, Phishing
Borough of WestwoodA data breach that began in December 2018Initial Access, Data Breach
City of New BedfordThe city of New Bedford is hit by what appears to be a ransomware attack.Malware, Initial Access.
Onondaga County LibrariesOnondaga County Libraries are hit by a ransomware attack.Malware, Initial Access.

It is important to note that these attacks need to have sufficient post-incident review, root cause analysis and follow-up vulnerability / Pentesting audits to ensure no repeat of attack and that their compromise does not leave them vulnerable in the future. There may be numerous dormant access points, backdoors and details within Dark Web forums that attackers can use to enable attacks in the future when smarter solutions and services may yield an attacker a richer reward.

Further consideration
Smart City Threat Model, Smart City Cyber Security Framework

Leave a comment