An Inside View of a Ransomware Attack Response and Recovery

EasyChair Preprint no. 10001

Abstract

On August 16, 2019, a ransomware attack impacted 23 organizations in north and northwest Texas. The ransomware attack was unique in that it targeted primarily small community organizations and was coordinated through a single managed service provider. Response to the attack was intense and involved several local, state, and federal organizations, with the Texas governor activating the state national guard cybersecurity unit. This paper provides a firsthand account from a member of the state national guard cybersecurity unit that responded directly to one of the affected communities. Several observations are reported, and recommendations made to help improve cybersecurity awareness and preparedness in small municipalities and small and medium organizations.

Keyphrases: Incident Response and Recovery, Management of Cybersecurity, Ransomware

@Booklet{EasyChair:10001,
  author = {Casey Dzimiela and Murray Jennex},
  title = {An Inside View of a Ransomware Attack Response and Recovery},
  howpublished = {EasyChair Preprint no. 10001},

  year = {EasyChair, 2023}}