City of Atlanta officials provide little detail about cyberattack


Five days after a cyberattack forced City of Atlanta employees to turn off their computers to preserve the city’s network, officials declined to provide the public any new significant detail about the attack’s origin on Monday.

At a press conference at City Hall, an outside computer security consultant for the City of Atlanta said that his firm had completed the “investigation and containment phases” in response to the cyber attack.

“We are transitioning into the recovery phase to include the methodical restoration of critical systems,” said Michael R. Cote, President & CEO of Secureworks, an Atlanta-based firm called in to assist the city.

But as Atlanta Mayor Keisha Lance Bottoms faced questions about what vulnerabilities the investigation uncovered, Cote interrupted a reporter and appeared to contradict his earlier statement.

“Excuse me, excuse me, the investigation is not complete,” Cote said. “We started the early phases of the investigation. We still have a lot of work to do. We are beginning to move into the recovery phase. So there is multiple phases when you do an incident response investigation.”

Cote said he knew who was behind the attack, but declined to identify them.

The city’s Department of Atlanta Information Management at 5:40 a.m. Thursday learned of outages of various internal and customer applications “including some applications customers use to pay bills or access court related information,” according to a statement from Richard Cox, the city’s interim Chief of Operations.

The public safety department, water services and flights out of Hartsfield-Jackson Atlanta International Airport operated without incident, Cox said. 

However, the airport turned off its wifi following the hack and some tools on the airport’s website were down, such as security wait times and flight information. 

“While we aren’t directly affected by the cyberattack, we are being abundantly cautious and have taken these systems offline,” Atlanta airport spokesman Reese McCranie said.

“While we aren’t directly affected by the cyberattack, we are being abundantly cautious and have taken these systems offline,” Atlanta airport spokesman Reese McCranie said.

Bottoms said that city officials hadn’t found any evidence that sensitive employee or public data had been compromised in the Thursday attack. Still she urged employees and residents to monitor their accounts and credit activity.

She also did not rule out paying a $51,000 ransom being demanded to unlock the city’s computer system.

Bottoms compared the attack to a “hostage situation” and argued that the city couldn’t give away too much information.

“We are working around the clock,” she said. “We just continue to ask the public to be patient.”

Employees in five of the city’s 13 departments are performing their jobs “manually,” or are not able to function as efficiently as they have in the past.

Those departments include: Corrections, Watershed Management, Human Resources, Parks and Recreation and City Planning.

The Department of Watershed Management is unable to accept bill payments online or in person or process new water meter sales.

“This is really much bigger than a ransomware attack,” Bottoms said. “This was an attack on our government, which means it was an attack on all of us.”



Reader Comments ...


Next Up in Local

Gwinnett officer’s colleagues mourn as manhunt for suspect continues 
Gwinnett officer’s colleagues mourn as manhunt for suspect continues 

With the search for Gwinnett County Police Officer Antwan Toney’s alleged killer about to shift from a localized manhunt into a nationwide fugitive investigation early Sunday night, word came that a SWAT team was serving a search warrant on a residence just down the street from where the fatal shooting occurred. But the shooting suspect...
Police: 6 people shot, 3 critically, near Jacksonville Jaguars stadium
Police: 6 people shot, 3 critically, near Jacksonville Jaguars stadium

Six people were shot -- three critically -- near the football stadium where the NFL’s Jacksonville Jaguars play, the Jacksonville Sheriff's Office said Sunday. >> Read more trending news  The shooting happened “outside the stadium footprint” while a game was underway, but did not impact the game, authorities said Update...
JUST IN: Metro Atlanta piano teacher accused of child molestation found dead in jail cell
JUST IN: Metro Atlanta piano teacher accused of child molestation found dead in jail cell

The Roswell piano teacher arrested on child molestation charges last month was found dead in his Fulton County Jail cell Saturday morning, officials said. Troy Lawrence Palmer was found hanging in his cell around 8 a.m. Saturday, the Atlanta Police Department said in a statement to AJC.com on Sunday. An initial investigation suggests the cause of death...
How you can watch Orionid meteor shower, which peaks this weekend
How you can watch Orionid meteor shower, which peaks this weekend

The dazzling Orionid meteor shower is expected to peak at the tail end of this weekend and you don’t want to miss out on the much-anticipated celestial event. The annual shower has been called “one of the most beautiful showers of the year” by Bill Cooke, head of NASA’s Meteoroid Environment Office, and is a popular celestial...
UPDATE: Manhunt continues for Gwinnett officer shooting suspect
UPDATE: Manhunt continues for Gwinnett officer shooting suspect

UPDATE 11:30 P.M.:  With the shooting suspect still at large, anyone with information to share in the case is asked to call the tip line at 770-513-5710. To remain anonymous, tipsters should contact Crime Stoppers at 404-577-TIPS (8477) or visit www.crimestoppersatlanta.org. Crime Stoppers tipsters can receive up to $5,000 for information leading...
More Stories