Baltimore's recovery from a RobbinHood ransomware attack remains a slow, painstaking process -- and some systems will need to be completely rebuilt, city officials concede. The malware attack and resulting fallout suggest the Maryland municipality did not have a proper cybersecurity and disaster recovery plan in place, MSSP Alert believes.
The Baltimore ransomware attack occurred on May 7, 2019. Fast forward to May 21 and the following city systems still remain paralyzed, according to The Wall Street Journal:
In a potential silver lining, city officials emphasized that key services such as 911 emergency dispatch haven’t been affected by the current cyberattack, The Wall Street Journal notes.
Baltimore Ransomware Attack: RobbinHood Malware's Long-Term Impact
Fallout from the attack will be felt for months to come. In a May 17 statement to the media, Baltimore Mayor Jack Young said:
"Some of the restoration efforts...require that we rebuild certain systems to make sure that when we restore business functions, we are doing so in a secure manner.
I am not able to provide you with an exact timeline on when all systems will be restored. Like any large enterprise, we have thousands of systems and applications. Our focus is getting critical services back online, and doing so in a manner that ensures we keep security as one of our top priorities throughout this process. You may see partial services beginning to restore within a matter of weeks, while some of our more intricate systems may take months in the recovery process."
Young did not describe specific business continuity steps that were in place to ensure data was protected in the event of such an attack. The city is working with the FBI and cybersecurity experts to investigate the attack and restore systems in a safe manner. This city has not disclosed the names of cyber forensic or MSSP companies involved in the recovery.
In Young's defense, the attack occurred only a few days after he was sworn in as mayor. He succeeded former Mayor Catherine Pugh, who resigned after facing a range of ethics questions.
Backup and Recovery Missteps?
Although ransomware certainly remains a global problem, proactive organizations can leverage a mix of cybersecurity safeguards and best practices to mitigate the risks associated with such malware.
For instance:
Ransomware Attacks U.S. Cities, Government Infrastructure
Still, numerous cities and organizations have suffered major ransomware and malware attacks over the past year. Example strikes include:
