No residents’ info was leaked in cyberattack

County manager: Service restoration ‘largely complete.’

‘To date, we’ve had no release of sensitive data or further threats to do so.’ DickšAnderson FultonšCountyšmanager

The ransomware hack of Fulton County government systems Jan. 28 still is hampering county business, but fears that residents’ stolen personal information would be publicized — and potentially used by fraudsters — have not come true, County Manager Dick Anderson said.

“To date, we’ve had no release of sensitive data or further threats to do so,” he told county commissioners during their regular meeting.

The attack took many county systems offline, including phones. Service restoration is “largely complete,” but technical and law enforcement investigations continue, Anderson said. Security upgrades are incorporated in the repairs.

Many phones are working again, he said. The waterbill payment system is back online, and Anderson said work continues on the tax offices, the courts and the internal employee system.

Election systems, temporarily taken offline out of caution, weren’t affected; early voting is underway for Tuesday’s presidential primary, he said.

Anderson hopes all computer systems will be restored within the next month. For those functions still down, county offices — especially the judicial system — have gone back to paper or are using other workarounds.

The county is working on a case study of “lessons learned” from the attack and response, which it plans to share with other governments and the public, Anderson said.

The LockBit ransomware group claimed responsibility, setting a countdown timer on the dark web that displayed some stolen county documents and threatened to release far more if an unspecified ransom wasn’t paid.

LockBit has targeted thousands of governments and companies with ransomware attacks, and an international law enforcement crackdown Feb. 19 took down the group’s website. Police agencies also seized computer servers and cryptocurrency accounts.

Although the takedown was not a direct response to the Fulton County hack, it apparently cut off the hackers’ access to stolen Fulton data. LockBit put up a new web page and set another countdown threat, but that Thursday deadline passed with no document release.

Commission Chair Robb Pitts said neither the county nor anyone on its behalf paid any ransom.

Fultonw Countyw Managerw Dickw Anderson