Download PDFOpen PDF in browserAn Inside View of a Ransomware Attack Response and RecoveryEasyChair Preprint 100019 pages•Date: May 7, 2023AbstractOn August 16, 2019, a ransomware attack impacted 23 organizations in north and northwest Texas. The ransomware attack was unique in that it targeted primarily small community organizations and was coordinated through a single managed service provider. Response to the attack was intense and involved several local, state, and federal organizations, with the Texas governor activating the state national guard cybersecurity unit. This paper provides a firsthand account from a member of the state national guard cybersecurity unit that responded directly to one of the affected communities. Several observations are reported, and recommendations made to help improve cybersecurity awareness and preparedness in small municipalities and small and medium organizations. Keyphrases: Incident Response and Recovery, Management of Cybersecurity, Ransomware
|