Ransomware attacks on the rise — and small towns are in the crosshairs
By Irina Ivanova
/ MoneyWatch
An upstate New York school district delayed the start of the school year on Wednesday after a ransomware attack hampered its operations. The Orange County school district joins an unhappy parade of municipalities that have fallen victim to hackers.
Two Long Island school districts were hit by ransomware earlier this summer. Last month, nearly two dozen cities in Texas fell victim to what has been called a "coordinated" attack.
In the first half of the year, more than 50 cities or towns were the victims of ransomware attacks this year, according to a recent report from Barracuda, a cybersecurity firm. Indeed, two-thirds of more than 70 ransomware attacks tracked in the U.S. focused on local or state governments, according to the report.
Trending News
"Local, county, and state governments have all been targets, including schools, libraries, courts, and other entities," it found.
Smaller locations are at particular risk. Nearly half of the municipalities attacked had between 15,000 and 50,000 residents. A quarter had fewer than 15,000 residents, Barracuda said, noting that "smaller towns are often more vulnerable because they lack the technology or resources to protect against ransomware attacks."
The average ransom payout in the second quarter of this year was $36,295, according to a report by Coveware. That's nearly triple the average payment in the prior quarter. In the third quarter of 2018, when Coveware first started tracking payments, the average was $5,973.
Ransomware attacks have been on the rise in recent years because of how profitable they can be for attackers — and smaller cities are an attractive target. In addition to lacking resources, cities are often dealing with taxpayer money and so may elect to pay a ransom rather than try to recover their data in another way, said Wendi Whitmore, vice president of X-Force Threat Intelligence at IBM Security.
"We are definitely seeing more, and we see them because attackers see that they're successful," said Whitmore.
"A lot of times we have clients think it's a one-time cost," she added. But "If you pay the ransom, you still have to fix the [security] problem so the same thing doesn't happen tomorrow."
Not all cities opt for a quick fix. Barracuda found that of the 50 municipal attacks over six months, only three cities chose to pay the ransom. Many others are instead fighting it out, with mixed levels of success. Baltimore, which was attacked in May, refused to pay a $76,000 ransom; it has to date spent more than $5 million recovering the data lost in the attack, ProPublica reported.
The increase in attacks is driving a rise in cyber insurance — a rare new area of growth in the insurance industry. Cyber policies are more profitable for insurance companies than policies overall, according to a 2018 report from Aon, and last year, insurers collected $2 billion on premium on these policies. The number of cyber insurers is also rising, increasing 54% over four years.
But the quick growth of cyber insurance could itself be a factor driving increased attacks, ProPublica found. Insurers have encouraged hacked clients to pay the ransom rather than fight the attackers, on the grounds that it would save time and money, ProPublica reported. And there is some evidence that hackers are specifically going after companies they know have cyber insurance, presumably because they're more likely to pay up.
Whitmore recommends that organizations keep a backup of essential files that is disconnected from their main network so that, in case of an attack, hackers won't be able to seize all the files. She also suggested organizations rehearse their plan in case of a cyber attack, much like in a fire drill.
"You may not be able to use company email to get hold of everyone, so do we have the ability, in advance, to get a hold of everyone? It could be a WhatsApp group or Gmail," Whitmore advised.
First published on September 4, 2019 / 1:46 PM
© 2019 CBS Interactive Inc.. All Rights Reserved.
Pope says it's an "honor" to be criticized by U.S. conservatives
The pope made the comments while on a flight to Mozambique
32M ago 
Renowned chef in the Bahamas, helping save lives "one meal at a time"
The renowned chef's non-profit World Central Kitchen is one of the aid groups spearheading relief efforts in the stricken island nation
4H ago 
Dorian moving up East Coast after leaving Bahamas in ruins
Hurricane Dorian left parts of the Bahamas in ruins before slowly making its way up the U.S. Southeast coast
updated 25M ago 
Will Brexit drive Scotland to break from the United Kingdom?
"If Scotland is independent in 2025, 2030, I think Brexit will pretty obviously be the main reason for that," warns man who fought 5 years ago to maintain the union
5H ago 
Another Brexit delay likely as "rebels" try to block U.K. PM's path
Boris Johnson is threatening to answer a major defeat in parliament by calling a new election, which could help him, or end his short stint in office and derail his Brexit ambitions
3H ago 
Ransomware attacks on rise — and small towns are in crosshairs
"We see them because attackers see that they're successful," said one cybersecurity pro of spike in municipal hacks
4M ago 
Homeless man reunites with family after 24 years
The officer who helped Jose Lopez even got him a shave and haircut before the long-awaited reunion
20M ago 
Is climate change making hurricanes more powerful?
"Almost all the research shows that in the future, hurricanes are likely to get more intense"
23M ago 
Purdue Pharma prepping for a bankruptcy, report says
Lawyers for opioid peddler Purdue Pharma have documents in works for a Chapter 11 bankruptcy filing, Reuters reports
34M ago 
Tropical Storm Fernand hits Mexico as Dorian nears U.S.
Two more tropical storms have been named by the National Hurricane Center, though none pose a major threat to the U.S.
46M ago 
Trump briefed on Hurricane Dorian — live updates
President Trump is receiving a briefing on Hurricane Dorian as it slowly approaches the U.S. coastline
updated 55M ago 
CBS News Eye on Trends: The latest from the CBS News Election & Survey Unit
A recap of latest polls and data-driven studies from the CBS News Election & Survey Unit
2H ago 
Texas Rep. Bill Flores announces retirement
Flores is the fifth GOP lawmaker from Texas to retire in the past three months
2H ago 
D.C. official calls for more action on hate crimes in city
D.C. Delegate Eleanor Holmes Norton says a previous request for information by the U.S. attorney's office has gone unanswered
3H ago 
O'Rourke campaign on false claim Odessa shooter was a supporter
The conspiracy theory, which went viral on Twitter, was echoed by a Trump campaign surrogate
3H ago 
Vince Gill on getting personal in his latest album, "Okie"
"I go to music for grief," he said. "It's cheaper than therapy"
1H ago
Vince Gill on his personal, raw new album
Singer-songwriter Vince Gill has sold more than 26 million albums, and has more Grammy Awards than any other male country artist. Now with his fifteenth studio album, "Okie," Gill is releasing some of his most personal songs yet. Anthony Mason reports.
4H ago 06:37 
Prince Harry launches travel sustainability initiative
While making the announcement, he also addressed the recent controversy over his and Meghan Markle's use of private jets last month
17H ago 
Ariana Grande sues Forever 21 over look-alike ads
Grande's $10 million lawsuit claims the clothing company ripped lyrics, color schemes and clothes from her "7 Rings" video
3H ago 
After Kevin Hart car crash, "The Rock" posts emotional message
"We have a lot more laughing to do together. Love you man. Stay strong," Dwayne "The Rock" Johnson wrote on Instagram
18H ago
Ransomware attacks on rise — and small towns are in crosshairs
"We see them because attackers see that they're successful," said one cybersecurity pro of spike in municipal hacks
4M ago 
Google fined $170M for violating kids' privacy on YouTube
Video platform illegally harvested children's online data without getting their parents' consent, FTC says
1H ago 
Facebook tells Homeland Security: Don't create fake accounts
Federal agency lets employees create phony online accounts to monitor people trying to enter the U.S.
20H ago 
Facebook considers hiding "like" counts in news feed
Drive to amass huge support for a post, a cornerstone of the "influencer" economy, is linked to poor mental health
20H ago 
App for movie fans raises specter of "deepfake" technology
Zao allows users to place themselves inside movie or TV scenes, to "become" famous actors, but experts warn of threats to privacy
Sep 3
Is climate change making hurricanes more powerful?
"Almost all the research shows that in the future, hurricanes are likely to get more intense"
23M ago
Prince Harry launches travel sustainability initiative
While making the announcement, he also addressed the recent controversy over his and Meghan Markle's use of private jets last month
17H ago 
Devastating images show Dorian ravaging the Bahamas
The deadly storm, which was stuck in place over the island nation, has been pounding the northern Bahamas for nearly two days
18H ago 
Intense hurricanes like Dorian cause 1,000 times more damage
Research shows Category 5 hurricanes do exponentially greater damage – and we're seeing them much more frequently
Sep 3 
Inside the labs creating meat from stem cells
High-tech laboratories in Israel are pioneering slaughter-free meat created out of cells from farm animal tissues. It's real steak and real chicken, but no animals are hurt.
Aug 30
Purdue Pharma prepping for a bankruptcy, report says
Lawyers for opioid peddler Purdue Pharma have documents in works for a Chapter 11 bankruptcy filing, Reuters reports
34M ago 
Michigan becomes first state to ban flavored e-cigarettes
Governor Gretchen Whitmer accuses e-cigarette companies of using sweet flavors to hook young people on nicotine
2H ago 
Breaking bad habits of sugary sodas and junk food
New studies find diets consisting mainly of junk foods and sugar-sweetened soft drinks can have devastating, even deadly, health impacts
2H ago 
Oregon death from lung illness may be linked to vaping
Oregon health officials say they are investigating the death of a person who had severe respiratory illness after using an e-cigarette
3H ago
New laws aim to curb nicotine use among teens
This week, three states joined 10 others in enacting laws that raise the legal age to buy any tobacco products to 21
2H ago
Google fined $170M for violating kids' privacy on YouTube
Video platform illegally harvested children's online data without getting their parents' consent, FTC says
1H ago 
Will Walmart's new ammo policy reduce guns on the street?
Because most firearms sales stem from thousands of small gun shops or gun shows, Walmart's impact is unclear
4H ago 
Florida hit by price gouging ahead of Hurricane Dorian
State's attorney general has received more than 2,400 reports of price gouging on everything from gas to water
21H ago
Ariana Grande sues Forever 21 over look-alike ads
Grande's $10 million lawsuit claims the clothing company ripped lyrics, color schemes and clothes from her "7 Rings" video
3H ago 
Walmart asks customers not to openly carry guns, halts some ammo sales
After shootings at two stores, retailer will also stop selling some ammunition and completely exit handgun market
18H ago
D.C. official calls for more action on hate crimes in city
D.C. Delegate Eleanor Holmes Norton says a previous request for information by the U.S. attorney's office has gone unanswered
3H ago 
America's deadliest mass shootings
These are the deadliest mass shootings in American history
Aug 5 40 photos 
Boy confesses to killing parents and 3 siblings in tiny Alabama town
A 14-year-old boy admitted to killing five members of his family, including his three younger siblings, in a slaying that rattled a small Alabama town, authorities said
5H ago 
Sheriff: Boy killed his family, later confessed
A 14-year-old boy admitted to killing five members of his family, including his three younger siblings in a small Alabama town, authorities said Tuesday. The slayings rocked the quiet community of Elkmont, a tiny town of 500 just northwest of Huntsville.
5H ago 01:44 
"The View" co-host Meghan McCain sounds off on gun control
"The View" co-host warned there could be "violence" if people's guns are taken away from them
3H ago 
Space
Trump launches U.S. Space Command
President Trump held a Rose Garden event to commemorate the establishment of the U.S. Space Command Thursday, as the president pushes for the creation of his sixth branch of the military, the Space Force. CBS News' Bofta Yimam reports.
Aug 29 01:53 
Kennedy Space Center bracing for Hurricane Dorian
NASA is hauling a massive launch gantry off the launch pad to avoid the threat of hurricane winds
Aug 29 
Trump establishes U.S. Space Command
President Trump marked the establishment of the U.S. Space Command in the Rose Garden, and unveiled its flag for the first time during a ceremony Thursday afternoon.
Aug 29 03:49 
Trump marks establishment of U.S. Space Command
The president's "Space Force" must receive congressional approval
Aug 29 
SpaceX launches "Starhopper" test flight
The Starhopper is testing propulsion systems that will be used in SpaceX's planned heavy lift Starship spacecraft
Aug 27 
Highest-paid NFL players in 2019, ranked
These are the NFL superstars who earn the most cash this season
Aug 29 50 photos 
Ashley Fallis death: A family's fight for justice
Was the Colorado mother's 2012 death a suicide, as her husband maintains, or was it murder, as her parents insist?
Aug 24 15 photos 
World's most polluted cities
Air pollution can cause serious health problems for people who are exposed to it, even for just a few minutes
Aug 23 51 photos 
Pictures from the Amazon rainforest fires
A record number of fires have devastated the Amazon rainforest in Brazil and neighboring countries
Aug 22 30 photos 
Jason Corbett murder: A look at the evidence
In August 2015, former FBI agent Tom Martens and his daughter Molly Corbett admitted killing her Irish-born husband Jason Corbett, insisting they beat him in self-defense with a brick paver and a baseball bat because Jason was choking Molly and threatening to kill her
Aug 17 11 photos 
Popular
Homeless man reunites with kids after 24 years
A homeless man named Jose Lopez reunited with his two daughters after more than two decades apart, and met his grandchildren for the first time. He got some crucial help from a New Jersey Transit police officer who took him under his wing.
updated 10M ago 01:57 
Dorian prompts some evacuations in Florida
Mandatory evacuations are in place for some residents in eight counties along Florida's east coast. Dorian is projected to bring dangerous conditions to Georgia and South Carolina next. CBS News national correspondent Mark Strassmann joined CBSN with more.
updated 2M ago 05:37 
9 Chinese students denied entry into U.S.
Arizona State University is demanding answers after 9 Chinese students were blocked from returning to school. The undergraduates were traveling to the U.S. for the fall semester when they were detained at LAX and eventually forced to fly back to China. Higher education reporter for the Arizona Republic, Rachel Leingang, joins CBSN with details.
updated 49M ago 05:09 
Kid influencers: Few rules, big money
Being a social media influencer is now considered one of the most popular career aspirations for millennials and Gen Z. But experts warn that regulations need to be put in place as younger and younger influencers share their lives on camera. This episode of CBSN Originals looks at the lives of three families whose kids are popular influencers on social media, while exploring some of the dangers implicit in the “kidfluencer” industry.
Aug 23 23:06 
Sacklers negotiate Purdue opioids settlement
Washington Post reporter Lenny Bernstein joins CBSN to discuss his reporting on a proposed Purdue Pharma settlement could leave the Sackler family with most of their personal fortune.
updated 9M ago 07:20
