After cyberattack, much of county's business done on paperDecember 7, 2017 11:45pm

CHARLOTTE, N.C. (AP) — North Carolina's largest metro area was discovering just how hard it is to conduct business without county computers that handle numerous transactions on Thursday, a day after local leaders refused to pay hackers who froze their system.

Mecklenburg County computer systems that collect property taxes, handle building permits and process jail inmates were out of commission while technology workers made digital repairs with backed-up data. Officials say the fixes will take days.

County officials were also taking new precautions against fraudulent emails because hackers have launched a new attack in response to their refusal to pay ransom. No further damage to the system was reported.

In the meantime, a variety of transactions with county government were being done on paper.

Darryl Broome, a contractor who does remodeling and demolition work, went in person to a county office to retrieve land information he normally could look up on his home computer. He had to drive 10 miles and spent about a half-hour looking through paper records.

"It's a bit frustrating because you learn that you really need certain things online," he said. "You get used to doing certain things online, and when you have to slow down, it costs you time and time costs you money."

The county of more than 1 million residents includes Charlotte, but the city government said its separate computer system wasn't affected by the attack. Nor were the computers that handle 911 calls and dispatch for the city and county, said Charlotte Fire Department Deputy Chief Richard Granger.

Mecklenburg County manager Dena Diorio told staff in an email Thursday that the county was disabling employees' ability to open attachments generated through Dropbox and Google Docs because of renewed attacks.

She said that because the county refused to pay ransom to unlock dozens of frozen servers, "the cyber criminals are redoubling their efforts to penetrate the County's systems, primarily through emails that contain fraudulent attachments with viruses that could further damage our systems."

Many county-run services have been delayed. The sheriff has said it's taking longer to manually process arrestees, as well as inmates due to be released.

Meanwhile, payments to the tax office must be made with a check, cash or money order, while code inspectors have been slowed down by having to use paper records, according to a list of affected services.

Cyberattacks on local government are becoming increasingly common and sophisticated. Security experts say Mecklenburg County followed the right steps before and after the cyberattack, including declining to pay the ransom.

"Unfortunately, it's become all too common," said Lawrence Abrams, who runs the cyber security site bleepingcomputer.com. "It's smart not to pay the ransom if you can avoid it. In paying these ransoms, it's obviously encouraging others."

Counties in Indiana and Alabama are among those that have paid to regain access to data frozen by cyberattacks since late last year. The Montgomery Advertiser reported that Montgomery County, Alabama, faced disruptions to some operations even after paying hackers in September.

Other public organizations have chosen to rebuild instead of paying hackers. In November 2016, a ransomware attack on San Francisco's transit system resulted in officials shutting down ticketing machines, allowing free rides for much of a weekend. But transit officials didn't pay a ransom. The St. Louis library system said it took days to restore electronic services for patrons and weeks more to fix all of its computers after it refused to pay hackers behind a ransomware attack this year.

Ross Rustici, senior director of intelligence services at the firm Cybereason, said Mecklenburg County appears to have done a good job of backing up its data if it's able to restore the system without paying the hackers.

"It seems like the county was fairly well-prepared," he said. "Overall, this is not as bad of a story as it could have been."

Mecklenburg County revealed Tuesday that it was facing a computer outage after an employee opened an email attachment containing malicious software. Hackers had sought digital currency worth more than $23,000 to unlock the data.

A forensic examination shows 48 of the county's 500 servers were affected, Diorio said, adding that county government officials believe the hacker wasn't able to gain access to individuals' health, credit card or social security information. Without getting the compromised servers unlocked, the county will have to rebuild significant parts of the system using the backup data.

___

Drew reported from Raleigh, North Carolina.

___

Follow Drew on Twitter at www.twitter.com/JonathanLDrew .

Page 1 of 1

More Stories Like This

In this undated photo provided by the Los Angeles County Metropolitan Transportation Authority, a stand-off explosion detection units is deployed in a corridor at The Metro in Los Angeles. U.S. Sen. Chuck Schumer, D-NY, wants the Transportation Security Administration to speed up plans to equip transit hubs with the screening devices that can detect suicide vests like the one that exploded in a New York City subway tunnel on Dec. 11, 2017. Schumer says that the devices are urgently needed in New York City and other busy transit areas. (LA Metro/Dave Sotero via AP)
Sen. Schumer: Bomb-detection units needed at transit hubs
California Lt. Gov. Gavin Newsom, center, reacts during a service celebrating the life of Mayor Ed Lee at San Francisco City Hall in San Francisco, Sunday, Dec. 17, 2017. San Francisco Mayor Ed Lee was remembered for his humility, integrity and infectious smile during a public celebration of his life Sunday at City Hall attended by family members, former staff, politicians and residents.  (Scott Strazzante/San Francisco Chronicle via AP, Pool)
'Celebration of life' for San Francisco mayor who died at 65
Police giving extra security after threat to Cory BookerThe mayor of Newark says the city is helping to provide extra security following a threat on the life of New Jersey Sen. Cory Booker and his family
Sen. Dianne Feinstein and San Francisco acting Mayor London Breed attend a service celebrating the life of Mayor Ed Lee at San Francisco City Hall in San Francisco, Sunday, Dec. 17, 2017. San Francisco Mayor Ed Lee was remembered for his humility, integrity and infectious smile during a public celebration of his life Sunday at City Hall attended by family members, former staff, politicians and residents.  (Scott Strazzante/San Francisco Chronicle via AP, Pool)
The Latest: Family, friends remember San Francisco mayor
AP Exclusive: Digital police state shackles Chinese minorityAP Exclusive: Possibly tens of thousands of people have been spirited without trial into China's secretive detention camps for alleged crimes that range from having extremist thoughts to merely traveling or studying abroad
AP Exclusive: In western China, thought police instill fearAP Exclusive: In western China, thought police instill fear
AdChoices

Related Searches

Related Searches

AdChoices