Lincolnshire County Council site hit by ransomware

The malware was demanding the council pay £1m to unscramble encrypted data

binary on a screen with words 'hacking attack'

Lincolnshire County Council's website has been down for five days, following a ransomware attack demanding 1 million.

The malware infected the council's online systems as well as its public-facing website and encrypted all the files, saying it would not unscramble them unless the council paid the money.

A tweet posted on the council's official feed yesterday read: "Following a malware attack, the majority of our systems will be back online by tomorrow morning. No data has been stolen. Thank you"

Although the sites were taken offline, the council said only a few files were encrypted by the malware and added the website should be up and running again early this week. Everything appeared to be functioning normally at the time of writing. 

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

The authority confirmed it was a zero-day attack, adding that it was unfortunate it was the first organisation to have been targeted with this particular malware and that security experts were not previously aware of this particular type of ransomware.

"People can only use pens and paper, we've gone back a few years," the council's CIO Judith Hetherington-Smith told the BBC.

"[The attack] happened very quickly. Once we identified it we shut the network down, but some damage is always done before you get to that point - and some files have been locked by the software.

She added that many of the files hit can be restored from the back-up, so all was not lost in the attack.

Lincolnshire Police is investigating into the attack to try and determine who would make such demands.

Featured Resources

What you need to know about migrating to SAP S/4HANA

Factors to assess how and when to begin migration

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

Testing for compliance just became easier

How you can use technology to ensure compliance in your organisation

Download now

Best practices for implementing security awareness training

How to develop a security awareness programme that will actually change behaviour

Download now
Advertisement

Recommended

Visit/malware/33080/hackers-abuse-linkedin-dms-to-plant-malware
malware

Hackers abuse LinkedIn DMs to plant malware

25 Feb 2019
Visit/security/malware/28083/the-five-best-free-malware-removal-tools
Security

Best free malware removal tools 2019

23 Dec 2019
Visit/antivirus/28144/best-antivirus
antivirus

Best antivirus for Windows 10

3 Sep 2019

Most Popular

Visit/policy-legislation/data-governance/354496/brexit-security-talks-under-threat-after-uk-accused-of
data governance

Brexit security talks under threat after UK accused of illegally copying Schengen data

10 Jan 2020
Visit/security/cyber-security/354468/if-not-passwords-then-what
cyber security

If not passwords then what?

8 Jan 2020
Visit/policy-legislation/31772/gdpr-and-brexit-how-will-one-affect-the-other
Policy & legislation

GDPR and Brexit: How will one affect the other?

9 Jan 2020
Visit/web-browser/30394/what-is-http-error-503-and-how-do-you-fix-it
web browser

What is HTTP error 503 and how do you fix it?

7 Jan 2020