California Hit By Cyber-Attack, LockBit Claims Responsibility
California’s finance department has been hit by a cybersecurity attack, the state’s Cybersecurity Integration Center (Cal-CSIC) confirmed on Monday. At the time of writing, the California Budget website remains offline
According to a blog post by Cal-CSIC, the intrusion was identified through coordination with state and federal security partners.
“Upon identification of this threat, digital security and online threat-hunting experts were rapidly deployed to assess the extent of the intrusion and to evaluate, contain and mitigate future vulnerabilities,” reads the statement.
The Cal-CSIC further explained that while they cannot comment on specifics of the ongoing investigation, they confirmed that no state funds have been compromised.
Meanwhile, the Russia-affiliated ransomware group LockBit is claiming responsibility for the attacks, days after Mikhail Vasiliev was charged with participation in the gang's global ransomware campaign.
Writing in their blog, LockBit said they have stolen 76GB of data, including IT and financial documents, confidential data and “sexual proceedings in court.” They added that the Department of Finance has until December 24 to pay up or else the group will publish a cache of stolen files.
“Cal-CSIC seems to imply that the incident was proactively detected and may have been mitigated, although the ebudget website continues to be inaccessible as of Monday afternoon,” explained Chris Clements, VP of solutions architecture at Cerberus Sentinel.
According to the security expert, this would indicate that cyber-criminals may have been successful in encrypting or wiping at least some systems with ransomware or wipers before detection.
“While the facts are not completely known yet, the apparent system outages as well as extortion threats from LockBit of publicly releasing stolen data stretch the meaning of ‘proactively detected,’” Clements added.
The attack comes amidst Governor Gavin Newsom having to present his budget for the next fiscal year by January 10, 2023. The current budget allocated for cybersecurity efforts is $38.8m.
At the time of writing, the California Budget website remains offline. The security incident comes weeks after a report from Trellix confirmed LockBit ransomware remained the most widespread in the third quarter of 2022.
“Upon identification of this threat, digital security and online threat-hunting experts were rapidly deployed to assess the extent of the intrusion and to evaluate, contain and mitigate future vulnerabilities,” reads the statement.
The Cal-CSIC further explained that while they cannot comment on specifics of the ongoing investigation, they confirmed that no state funds have been compromised.
Meanwhile, the Russia-affiliated ransomware group LockBit is claiming responsibility for the attacks, days after Mikhail Vasiliev was charged with participation in the gang's global ransomware campaign.
Writing in their blog, LockBit said they have stolen 76GB of data, including IT and financial documents, confidential data and “sexual proceedings in court.” They added that the Department of Finance has until December 24 to pay up or else the group will publish a cache of stolen files.
“Cal-CSIC seems to imply that the incident was proactively detected and may have been mitigated, although the ebudget website continues to be inaccessible as of Monday afternoon,” explained Chris Clements, VP of solutions architecture at Cerberus Sentinel.
According to the security expert, this would indicate that cyber-criminals may have been successful in encrypting or wiping at least some systems with ransomware or wipers before detection.
“While the facts are not completely known yet, the apparent system outages as well as extortion threats from LockBit of publicly releasing stolen data stretch the meaning of ‘proactively detected,’” Clements added.
The attack comes amidst Governor Gavin Newsom having to present his budget for the next fiscal year by January 10, 2023. The current budget allocated for cybersecurity efforts is $38.8m.
At the time of writing, the California Budget website remains offline. The security incident comes weeks after a report from Trellix confirmed LockBit ransomware remained the most widespread in the third quarter of 2022.
AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.