1 min read

Ransomware Attack Wreaks Havoc On Prison Employees And Inmates

Chalk up another first for the hackers.  For the first time that we know of, a successful hacking attack caused prisoners in New Mexico to be confined to their cells for a time.

The Metropolitan Detention Center in Bernalillo County, New Mexico went into lockdown on January 5th of this year (2022) when hackers infiltrated the prison system’s network and deployed a malware payload.

For the duration of the system outage the prison cells could not be opened.

While the incident was not reported at the time, details came to light indirectly when the attack and its effects were referenced in court documents. One public defender representing the inmates suggested that their Constitutional rights had been violated due to the incident, which meant that visitations were cancelled.

In addition to the uproar it caused among the prison population, a number of the local government’s databases appear to have been corrupted. Until functionality was restored the employees of the prison could not access camera feeds or access any inmate data.

Of course, the physical keys carried by the guards still worked. However, given the situation, the Warden placed the entire facility on lockdown for the duration of the incident.  Full functionality was restored by the afternoon of January 5th.

Few additional details have been revealed about the attack.  We don’t even know what sort of malware was deployed.  Only that the system is “still being repaired,” according to country officials, and that certain systems are still being impacted.

Unfortunately, the issue has prompted Federal Law Enforcement’s involvement as the prison was already under fire for poor conditions.  What happens next is anyone’s guess.

Additional Transparency Would Help

It’s understandable that the county is being somewhat tight-lipped about the incident. That’s especially considering the court case. At least some additional transparency would be appreciated.

Used with permission from Article Aggregator

Your AI Agent Went Rogue. Now What?

Most incident response plans assume a person is behind the mistake. Here's how to build one that holds up when an AI agent is the one acting.

Read More

The Fine Print Problem: Vetting an AI Vendor Before You Deploy

A due diligence checklist for any AI vendor: data handling, training-use terms, subprocessor disclosure, breach notification, and liability language.

Read More

Give Your AI Agents Only What They Need, Nothing More

Learn how to scope least-privilege access for AI agents: dedicated accounts, the identity, authority, autonomy, consequence framework, and review...

Read More

Large Company Snap-On Tools Recently Hit By Data Breach

If you have any tools in your garage, odds are good that at least a few of them are Snap-on tools.

Read the full blog
The Cybersecurity Tools Are Fine. The Strategy Is What's Missing

The Cybersecurity Tools Are Fine. The Strategy Is What's Missing

Most businesses have cybersecurity tools. Few have a strategy. Here's what cybersecurity risk management actually looks like in practice.

Read the full blog

Why Your Law Firm Needs Managed IT & Data Backups in Portland OR

Data is essential for every law firm. The loss of crucial information can seriously impact operations and harm the firm's reputation.

Read the full blog