El Cerrito Investigates Potential Data Theft After Ransomware Attack

The city of El Cerrito in California is currently investigating a potential data theft after it was targeted by the LockBit ransomware group. This incident marks another instance of a California city falling victim to a ransomware attack, following similar attacks on Oakland, Modesto, Hayward, and other entities. The city has stated that its systems remain operational, and it is actively working with cybersecurity experts and law enforcement to assess the validity of the cybercriminals’ claims and mitigate any potential impact on sensitive information.

The LockBit ransomware gang recently added El Cerrito to its leak site, where it showcases its victims. El Cerrito, a city with over 25,000 residents located just north of Oakland, now faces the potential exposure of its data due to this attack. The same ransomware group was responsible for the April attack on Oakland, which severely disrupted the city’s operations for several weeks.

According to the assistant to the City Manager, Will Provost, El Cerrito’s systems are fully operational, and there have been no reports of any devices or data being locked out. This suggests that the city has not experienced any significant disruptions as a result of the attack. However, the city is taking the situation seriously and has engaged third-party cybersecurity specialists and law enforcement to investigate the claims made by the cybercriminals.

El Cerrito is actively collaborating with third-party cybersecurity specialists and law enforcement agencies to address the situation. These experts will assist in assessing the validity of the cybercriminals’ claims and determining if any sensitive information has been compromised. If any individuals are found to be affected, the city will adhere to applicable laws and notify them accordingly.

The attack on El Cerrito is part of a larger trend of ransomware attacks on California cities and organizations. Oakland, Modesto, Hayward, the San Bernardino County Sheriff’s Department, the Bay Area Rapid Transit system, a major pro bono law firm, and a California-based company controlling 16 hospitals have all experienced ransomware attacks in 2023. These incidents highlight the growing threat of ransomware and the need for robust cybersecurity measures to protect sensitive data.

While the city’s systems remain operational, it is actively working with cybersecurity experts and law enforcement to assess the impact of the attack and determine if any sensitive information has been compromised. This incident adds to the list of ransomware attacks on California cities and organizations, emphasizing the need for enhanced cybersecurity measures in the face of this growing threat.