Florida city fires IT employee after paying ransom demand last week

I wonder if they’ll also fire the management who failed to mitigate the attack…:

Officials from Lake City, Florida, have fired an IT employee last week after the city was forced to approve a gigantic ransomware payment of nearly $500,000 last Monday.

The employee, whose name was not released, was fired on Friday, according to local media reports [12], who cited the Lake City mayor.

The city’s IT manager is also planning to revamp the town’s entire IT department to prevent a similar incident from happening in the future.

AFTERMATH OF THE “TRIPLE THREAT” ATTACK

Lake City’s IT network was infected with malware on June 10. The city described the incident as a “triple threat.”

In reality, an employee opened a document they received via email, which infected the city’s network with the Emotet trojan, which later downloaded the TrickBot trojan, and later, the Ryuk ransomware.

The latter spread to the city’s entire IT network and encrypted files. Hackers eventually demanded a ransom to let the city regain access to its systems.

[…]

Original article here