Ransomware attack hits 23 Texas cities

AUSTIN, Texas — More than 20 local governments in Texas are facing a coordinated ransomware attack, authorities said.

The Texas Department of Information Resources said in a statement Saturday that it believes a single source is behind all 23 of the attacks. It didn’t name the affected cities or provide details about the attacker’s demands.

Texas and federal agencies, including the Department of Homeland Security and the FBI, are working with the affected cities to try to restore their access.

The attack in Texas is similar to other ransomware attacks that have crippled digital operations in cities around the country in recent years, Elliott Sprehe, a department spokesman, said Tuesday.

“Once it’s activated, your computer system is effectively locked from use until you pay that ransom as requested,” he said.

Trying to prevent similar attacks is “a continual catandmouse game” for governments of all sizes, Sprehe said.

The Panhandle city of Borger and Dallas suburb of Keene said they were among the victims. Officials from the two cities didn’t immediately reply to Tuesday messages seeking comment and an FBI spokeswoman declined to discuss the attacks, citing the ongoing investigation.

Borger officials said the attack took place Friday and prevented employees from accepting payments and accessing vital records, including birth and death certificates. Police, fire and 911 services were not affected and city officials don’t believe any credit card or personal information was compromised.

Ransomware often spreads through emails containing malicious links or attachments or by visiting a compromised website. According to the FBI, more than 1,400 ransomware attacks were reported last year and victims reported paying $3.6 million to hackers.

Among the U.S. cities that have been targeted by ransomware attacks is Baltimore, where officials refused a demand for about $76,000 in bitcoin to restore access to its computer network.

Several Florida cities in June paid hundreds of thousands of dollars to hackers who encrypted records, disabled their email systems and blocked their ability to pay employees and vendors via direct deposit.