City of Atlanta officials provide little detail about cyberattack


Five days after a cyberattack forced City of Atlanta employees to turn off their computers to preserve the city’s network, officials declined to provide the public any new significant detail about the attack’s origin on Monday.

At a press conference at City Hall, an outside computer security consultant for the City of Atlanta said that his firm had completed the “investigation and containment phases” in response to the cyber attack.

“We are transitioning into the recovery phase to include the methodical restoration of critical systems,” said Michael R. Cote, President & CEO of Secureworks, an Atlanta-based firm called in to assist the city.

But as Atlanta Mayor Keisha Lance Bottoms faced questions about what vulnerabilities the investigation uncovered, Cote interrupted a reporter and appeared to contradict his earlier statement.

“Excuse me, excuse me, the investigation is not complete,” Cote said. “We started the early phases of the investigation. We still have a lot of work to do. We are beginning to move into the recovery phase. So there is multiple phases when you do an incident response investigation.”

Cote said he knew who was behind the attack, but declined to identify them.

The city’s Department of Atlanta Information Management at 5:40 a.m. Thursday learned of outages of various internal and customer applications “including some applications customers use to pay bills or access court related information,” according to a statement from Richard Cox, the city’s interim Chief of Operations.

The public safety department, water services and flights out of Hartsfield-Jackson Atlanta International Airport operated without incident, Cox said. 

However, the airport turned off its wifi following the hack and some tools on the airport’s website were down, such as security wait times and flight information. 

“While we aren’t directly affected by the cyberattack, we are being abundantly cautious and have taken these systems offline,” Atlanta airport spokesman Reese McCranie said.

“While we aren’t directly affected by the cyberattack, we are being abundantly cautious and have taken these systems offline,” Atlanta airport spokesman Reese McCranie said.

Bottoms said that city officials hadn’t found any evidence that sensitive employee or public data had been compromised in the Thursday attack. Still she urged employees and residents to monitor their accounts and credit activity.

She also did not rule out paying a $51,000 ransom being demanded to unlock the city’s computer system.

Bottoms compared the attack to a “hostage situation” and argued that the city couldn’t give away too much information.

“We are working around the clock,” she said. “We just continue to ask the public to be patient.”

Employees in five of the city’s 13 departments are performing their jobs “manually,” or are not able to function as efficiently as they have in the past.

Those departments include: Corrections, Watershed Management, Human Resources, Parks and Recreation and City Planning.

The Department of Watershed Management is unable to accept bill payments online or in person or process new water meter sales.

“This is really much bigger than a ransomware attack,” Bottoms said. “This was an attack on our government, which means it was an attack on all of us.”



Reader Comments ...


Next Up in Local

Man arrested after 17-car theft at three Roswell dealerships, cops say 
Man arrested after 17-car theft at three Roswell dealerships, cops say 

A man was arrested after 17 vehicles were stolen from three Roswell dealerships within the past week, Channel 2 Action News reported.  Antonio McCrary remained in the Fulton County jail Monday on burglary charges. Roswell police believe there are others connected to the crime.  The latest car thefts occurred Aug. 6 at Used Imports Auto...
How the AJC covered the Jerry Heard case from ‘ATL Homicide’
How the AJC covered the Jerry Heard case from ‘ATL Homicide’

The murder of Jerry Heard was the subject of the sixth episode of the TV One true-crime series "ATL Homicide." Heard's body was discovered dumped in a wooded area in southwest Atlanta in July 2002.  "ATL Homicide" recreates cases as told by David Quinn and Vince Velazquez, two retired Atlanta Police Department homicide...
4 members of Sinaloa drug cartel sentenced to prison in narcotics bust
4 members of Sinaloa drug cartel sentenced to prison in narcotics bust

More than a year after a drug bust yielded the arrests of four members of the Sinaloa drug cartel, a jury found them guilty of various drug charges, according to a release from the Douglas County District Attorney’s Office.  Martin Cuellor Lopez, Fidel Ayala-Agurrie, Jorge Arreola-Camarena, and Jose Arreola- Camarena were sentenced Friday...
Teen accused in crash that killed friend: ‘I honestly wish it was me instead of her’
Teen accused in crash that killed friend: ‘I honestly wish it was me instead of her’

Like a few of their peers, Cristina Pavon-Baker and Makayla Penn skipped school and went to the mall.  The duo were participating in senior skip day and, according to Channel 2 Action News, planned on shopping for bathing suits at Southlake Mall.  But they never made it.  Pavon-Baker’s car wrecked on I-75 North at the Jonesboro...
Cops: Georgia man raped girl weeks before stabbing 2 people 
Cops: Georgia man raped girl weeks before stabbing 2 people 

Before he allegedly stabbed two people at a McDonough mobile home park last week, Henry County police said Samuel Espinoza Escamilla raped a girl.  Escamilla, 22, is wanted on aggravated assault and rape charges in the crimes, which were allegedly committed a month apart, according to Henry County police and incident reports obtained by AJC...
More Stories