Secret Service probes Riverside police virus: 3 recent ransomware cases

Riverside is the latest government facing an apparent ransomware attack.

For years, the FBI has warned that the use of ransomware — malicious software that threatens to block access to data or to publish it unless the infected organization pays a ransom — is a fast-growing criminal enterprise.

MORE: Secret Service investigating Riverside computer attack

Organizations often don’t learn they have been infected until they can’t access their data or until computer messages appear demanding a ransom payment in exchange for a decryption key, according to the FBI’s website.

Here’s a look at the current attack and other recent cyber assaults.


U.S. Secret Service agents are investigating the attacks on Riverside’s police and fire servers, according to state and federal officials familiar with the matter.

The city is the victim of at least two attacks on its servers , one of which made about 10 months of files inaccessible to staff, City Manager Mark Carpenter said.

Carpenter said the term “ransomware” was used to describe the attacks. The term implies that a third-party held, or is holding, the city’s data hostage in exchange for a ransom, often paid in bitcoin or other cryptocurrency

PHOTOS: Luxury home built by Charles Kettering for sale

The Secret Service is tasked with defending U.S. financial institutions from cyber attacks. Because of the agency’s experience, the Secret Service often assists other entities facing similar attacks.

“As a matter of policy, the Secret Service does not discuss active criminal investigations,” said Kevin Dye, resident agent-in-charge for the U.S. Secret Service in Dayton.

Riverside officials have not determined what exactly happened during the attacks , Carpenter said. City officials plan to meet May 15 with the city’s third-party information technology company to discuss the problem.


Atlanta’s municipal government faced a ransomware attack in March. An attacker demanded a $50,000 ransom to restore the city’s systems.

City officials urged employees to check their bank accounts to make sure their financial information had not been accessed and said that anyone who had conducted transactions with the city could be at risk.

The city ended up shelling out nearly $2.7 million on eight emergency contracts in an attempt to fix the problem.

Three federal agencies — the FBI, the Department of Homeland Security and Secret Service — assisted Atlanta during its attack.


The Mad River Twp. Fire and EMS station is without years of data after its server was breached and encrypted with ransomware.

Chief Elmer Beard said the virus was found in August and the department has tried to work out solutions to get the information unencrypted. The hackers demanded payment for the information in Bitcoin, which translates to thousands of dollars he said.

“This data does contain personal identifiable information,” Beard said in a press release.

The data impacted is from information collected by officials when residents used EMS or fire services, Beard said.

It does not appear information was stolen, he said, instead the hackers encrypted the data so no one can read it. The department elected not to pay the ransom because they were unsure if they would actually get the information back, Beard said.

Read more coverage:

» The rise and fall of Elder-Beerman: A timeline of Dayton’s dying store

» Jim Renacci wins GOP primary, will face Sherrod Brown this fall

» Pike County murders: 8 deaths, 2 years, no answers

» Wright State University graduate wins U.S. Congressional primary

The Atlanta-Journal Constitution and WSB-TV contributed reporting from Atlanta.

Reader Comments ...

Next Up in Local

I-75 in West Chester Twp. re-opens after fatal crash
I-75 in West Chester Twp. re-opens after fatal crash

Southbound Interstate 75 in West Chester Twp. is a parking lot this morning following a fatal crash involving a motorcycle. Dispatchers with the Ohio State Patrol said the crash, involving a motorcycle and two other vehicles, occurred at around 3 45 a.m. Monday. RELATED: Temperatures near freezing, frost to start the week The far left lane is now opened...
You’ll find this special Knob Creek barrel-strength bourbon only at this steakhouse restaurant
You’ll find this special Knob Creek barrel-strength bourbon only at this steakhouse restaurant

Here’s the latest (ahem) proof of the power behind the bourbon renaissance that is sweeping this country.  Knob Creek has produced a special bottling of barrel strength — in this case, a bold 120-proof, or 60 percent alcohol — “Single Barrel Reserve” bourbon, and was looking for a partner to help roll it...
Middletown to develop new city transportation plan
Middletown to develop new city transportation plan

Another component in the development of Middletown’s new master plan will start in the coming weeks. Middletown City Council has approved a contract with WSP USA Inc., of Cincinnati, to create Middletown’s Transportation Plan for inclusion into the new City Master Plan under development. The contract is not exceed $72,000 and is currently...
How bad will flu season be this year? 5 things you need to know
How bad will flu season be this year? 5 things you need to know

The flu season last year was one of the worst on record, and health officials are urging people to get the flu shot early this year. Flu season runs through fall and winter, peaking somewhere in between December and February. “While flu spreads every year, the timing, severity, and length of the season varies from one season to another,&rdquo...
Large employers reportedly eye county-owned land in Xenia
Large employers reportedly eye county-owned land in Xenia

Large employers are eyeing county-owned land in Xenia that has all the infrastructure needed to become a hub of industrial activity. At least three “large businesses” have inquired in the last six months about the 140 acres making up Greene Regional Business Park, located on the southern outskirts of the city near U.S. 35, according to...
More Stories