Tag Archive for: Louisiana

Hackers steal $420K from Port of Louisiana; the Mississippi River port is beefing up security | News


The Louisiana state agency overseeing one of America’s largest ports by volume suffered a cyber-attack in last year that cost it more than $420,000, a newly public audit has found.

Auditors for the Port of South Louisiana said the cyber-attack led to the money being misappropriated. Port officials have been able to recoup about $250,000 through insurance and are filing paperwork to seek more reimbursement.

The agency has a budget of about $15 million a year.

A new annual audit, which covered the fiscal year ending on April 30, 2022, disclosed the theft but offered few details about what the hack was, when it happened or if any arrests had been made.

But port officials’ response to the auditors offered some clue.

Officials told auditors that they were training employees to protect against future attacks and have started “a third-party verification process” for vendors seeking payment that includes “verifying information through a phone call with a representative of the requesting vendor.”

Micah Cormier, spokesman for the port, said Wednesday the port would not offer more details “because making that information public will make the port vulnerable to another attack.”

The port hired Evalv IQ, a firm with expertise in cybersecurity. The company has completed “a cyber audit” that did not turn up “an active or live breach within 2022,” Cormier said.

“There were minor network vulnerabilities that have been corrected,” he said.

Separately, in September, port officials also announced they have received a nearly $1 million grant from the Federal Emergency Management Agency to improve the state agency’s cybersecurity and other security measures.

The grant award wasn’t directly related to the cyber-attack, Cormier said, but reflected a broader decision to respond seriously to rising security risks.

“This is becoming a bigger threat across the country and the world. This is just for simply locking down our vulnerabilities and hardening our infrastructure here, so we can make it better and prevent it from happening,” he said. 

The FEMA dollars are expected to beef up not only cyber security technologies and monitoring but also geographical software systems.

With the…

Source…

Louisiana was hit by Ryuk, triggering another cyber-emergency

Louisiana State Capitol, Baton Rouge at dusk

Enlarge / Louisiana state agencies were taken offline during the response to a Ryuk ransomware attack but are now largely up and running again thanks to backups. (credit: Joe Sohm/Visions of America/Getty Images via Getty Images)

In October, the Federal Bureau of Investigation issued a warning of increased targeting by ransomware operators of “big game”—targets with deep pockets and critical data that were more likely to pay ransoms to restore their systems. The past week has shown that warning was for good reason.

On November 18, a ransomware attack caused Louisiana’s Office of Technology Services to shut down parts of its network, including the systems of several major state agencies. These included the governor’s office, the Department of Health (including Medicare systems), the Department of Children and Family Services, the Department of Motor Vehicles, and the Department of Transportation. Louisiana Governor John Bel Edwards activated the state’s cybersecurity response team.

While some services have been brought back online—in some cases, within hours—others are still in the process of being restored. Most of the interrupted services were caused by “our aggressive actions to combat the attack,” according to Louisiana Commissioner of Administration Jay Dardenne. “We are confident we did not have any lost data, and we appreciate the public’s patience as we continue to bring services online over the next few days.”

Read 9 remaining paragraphs | Comments

Biz & IT – Ars Technica

Louisiana declares state of emergency after ransomware attacks

Don’t wait until ransomware strikes and then push the button marked “emergency response.” Make sure you take preventative measures in advance, such as making secure offsite backups of anything you cannot afford to lose.

Graham Cluley

Louisiana governor vetoes license plate reader legislation

Louisiana Governor Bobby Jindal has vetoed legislation that would provide for the pilot use of automatic license plate readers by law enforcement to identify stolen vehicles and uninsured motorists.

Like GPS trackers on vehicles and so-called Stingrays or “IMSI catchers” that track the location of mobile phones by mimicking cellphone towers, automatic license plate readers have become a controversial privacy issue, with many civil rights groups opposing their indiscriminate use.

In a letter, explaining his decision to return the bill to the state Senate, Jindal said the personal information captured by the automatic license plate reader cameras, which includes a person’s vehicle location, would be retained in a central database and accessible to not only law enforcement agencies but also to private entities for a period of time, regardless of whether or not the system detects that a person is in violation of vehicle insurance rules.

To read this article in full or to leave a comment, please click here

Network World Security