Tag Archive for: Illinois

Separate ransomware attacks reported by Illinois county, college


Illinois’ Henry County and Monmouth College have confirmed being impacted by separate ransomware attacks during the past week, according to The Record, a news site by cybersecurity firm Recorded Future.

Several of Henry County’s systems were taken down following the discovery of a wide-reaching intrusion on March 18, which has prompted county officials to seek assistance from law enforcement and government cybersecurity agencies in investigating the incident amid ongoing efforts to restore affected systems.

Such an incident has already been claimed by the Medusa ransomware operation, which sought a $500,000 ransom that should be paid by Friday. Toyota Financial Services, Moneris, and Water For People were some of the ransomware gang’s most recent targets.

Meanwhile, Monmouth College disclosed in filings with the Maine and California Offices of the Attorneys General that its systems had been infiltrated in a December ransomware attack, which resulted in the compromise of data belonging to 44,737 individuals, including their ID cards and driver’s licenses.

Source…

Illinois CISO Adam Ford steps down for role at cyber firm Zscaler


After five years as chief information security officer for the Illinois Department of Innovation and Technology, Adam Ford has moved into a new role at Zscaler, a cloud security company in San Jose, California.

Ford worked for the state of Illinois since 2000, starting his government tenure as a network architect and engineer. In 2023, he was the recipient of the National Association of State Chief Information Officers’ Thomas M. Jarrett State Cybersecurity Leadership Award for strengthening the state’s cybersecurity infrastructure, multi-factor authentication initiatives for network and system access and the improvements he made to information sharing, joint training exercises and coordinated responses to cyber incidents across state government agencies.

Prior to his departure, Ford posted on social media thanking the state’s administration for “strong sponsorship of cybersecurity initiatives” and the technology department’s leadership.

“In my more than 20 years with the state of Illinois, I’ve never failed to be impressed by the people who work here,” Ford wrote on LinkedIn earlier this week. “Public service isn’t all glamour, folks! Thank you to all my co-workers at DoIT and other agencies for putting in long hours, for wading into seemingly impossible problems and solving them, and for your friendship while doing so.”

The CISO position at the Illinois DoIT is open to applications until Jan. 19.

Sophia Fox-Sowell

Written by Sophia Fox-Sowell

Sophia Fox-Sowell reports on artificial intelligence, cybersecurity and government regulation for StateScoop. She was previously a multimedia producer for CNET, where her coverage focused on private sector innovation in food production, climate change and space through podcasts and video content. She earned her bachelor’s in anthropology at Wagner College and master’s in media innovation from Northeastern University.

Source…

Bill from Illinois Democrat seeks to bridge digital divide through free wifi in local parks


A Democratic congressman announced legislation this week that aims to use multiple federal government programs to bring broadband internet and computers to local parks across the country, bridging the digital divide in underserved communities by providing free internet services.

The Technology in the Parks Act of 2023, introduced by Rep. Danny Davis, D-Ill., aims to boost innovation, increase technology training and decrease inequality through multiple relevant internet programs.

“I believe that this legislation aligns with the nation’s commitment to fostering innovation, education, and community development,” Davis said in a statement. “This legislation, once passed, will contribute to building a more technologically inclusive society, ensuring that the benefits of advancements reach all corners of our community.”

The bill proposes an expansion of the Federal Communications Commission’s E-rates internet program to include local parks, which Davis said is key to bringing broadband access to outdoor community spaces, similar to the existing coverage for schools and libraries.

The FCC’s E-rate program helps schools and libraries across the country gain access to affordable broadband internet and is the government’s largest educational technology program.

The legislation would include local parks in the U.S. General Services Computers for Learning Program, providing access to computer equipment that federal agencies have identified as excess property and enabling technological advancements and digital literacy in those areas.

The third piece of the legislation would require the Labor Department to establish a program to offer grants for technology training programs in local parks, supporting skill development and ensuring that local parks that host such programs are eligible for E-Rate support.

The legislation “is a crucial step in bridging the technological divide and promoting education and skill development in our communities,” Davis said. “By extending E-Rate support to local parks, we empower these spaces to become hubs for technology training, creating opportunities for skill acquisition in areas such as coding, cyber…

Source…

Illinois Hospital Closure Showcases Ransomware’s Existential Threat


An Illinois hospital’s decision to cease operations later this week at least partly because of a 2021 ransomware attack that crippled operations for months is a stark reminder of the sometimes-existential threat that online extortion campaigns can pose.

That’s especially true for resource-strapped small and rural hospitals.

St. Margaret’s Health (SMH) will permanently close its hospitals, clinics, and other facilities at Spring Valley and Peru, Ill. this Friday, June 16, after serving the community for 120 years. Multiple factors led to the decision, including unprecedented expenses tied to the COVID-19 pandemic, low patient volumes tied to social-distancing mandates, and staff shortages that forced the health system to have to rely on temporary staffing agencies.

But the February 2021 ransomware attack on its systems at Spring Valley had a big part to play; they  catastrophically impacted the hospital’s ability to collect payments from insurers for services rendered, and the attack forced a shutdown of the hospital’s IT network, email systems, its electronic medical records (EMR) portal, and other Web operations.

A Contributing Factor

SMH vice president of quality and community services Linda Burt says the attack lasted four months, during which employees had no access to the IT system, including email and the EMR system. 

“We had to resort to paper for medical records. It took many months, and in some service lines, almost a year to get back online and able to enter any charges or send out claims,” Burt says. “Many of the insurance plans have timely filing clauses which, if not done, they will not pay. So, no claims were being sent out and no payment was coming in.”

SMH is the latest to make the list that security analyst and researcher Adrian Sanabria maintains of organizations that were forced out of business because of a cyberattack over the past two decades. The list currently comprises 24 organizations — many of them small — across multiple sectors. Among the names in the list is payment processing firm CardSystems, which closed in 2005 following a data breach that exposed sensitive data associated with some 40 million credit cards; security firm HBGary which went…

Source…