A serious cyberattack (ransomware) has left the Pennsylvania Attorney General's Office out of operation for more than two weeks , causing concern among citizens and significant delays in the functioning of the justice system.
In a statement, Attorney General David W. Sunday Jr. confirmed that the outage was caused by ransomware, a type of malware that encrypts files and demands a ransom to restore them. He stressed that his office did not succumb to blackmail.
"The outage came from an external factor that encrypted files with the aim of forcing us to pay. No amount has been paid," said , adding that a coordinated investigation is underway with the assistance of other agencies.
Closed systems, limited communication
The attack occurred on August 11 and took down critical systems of the organization, including the official website, email accounts and phone lines. Although some communication has now been restored, several services are still operating with severe restrictions. Staff are forced to perform their duties through alternative channels, which creates delays in service.
See also: PromptLock: The first AI-powered ransomware
At the time of writing, the Attorney General's website remains inaccessible, evidence of the seriousness and duration of the incident.
Impact on Justice
The cyberattack has already caused ripple effects in Pennsylvania's judicial system. Courts have issued orders extending time in criminal and civil cases to allow time to process matters that cannot be processed due to the disruption.
Despite the obstacles, the Attorney General's Office maintains that no impact on criminal prosecutions, investigations or civil proceedings is expected. However, the extension of time is inevitable, as full functionality has not yet been restored.
The big question: Was data exposed?
So far, the administration of the Attorney General's Office was stolen during the attack any sensitive data. If it is proven that cybercriminals gained access to personal information, the affected individuals will be officially notified.
The silence surrounding this issue is worrying, as attorney general's offices handle extremely sensitive cases, often involving criminal investigation data and citizens' personal information.
See also: Storm-0501: New ransomware attacks targeting the cloud
The perpetrators remain unknown
As of this writing, no known ransomware group has claimed responsibility for the attack. This leaves open all possibilities regarding the motives and identity of the perpetrators. In many cases, criminal groups wait to contact their target before making a public statement.
A repeating pattern in Pennsylvania
This attack is not an isolated incident. It is the third time that cybercriminals have used ransomware to target government entities in Pennsylvania.
- In 2020, Delaware County found itself at the mercy of the infamous DoppelPaymer ransomware, paying $500,000 to recover its encrypted systems.
- In 2017, the Senate Democratic Caucus in the same state suffered an attack that led to the complete shutdown of its computer network.
The fact that three serious attacks have been recorded in less than a decade proves that Pennsylvania government agencies remain high-risk targets.
☁️ Keep safe copies with Proton Drive
Encrypted cloud storage from Proton — protect your files from ransomware, corruption, and data loss with end-to-end encryption.
- ✔ End-to-end encrypted files & backups
- ✔ Version history — recover files after ransomware
- ✔ Free space — sync across all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The broader threat picture
Ransomware attacks are currently one of the most common and profitable forms of cyber extortion. According to international reports, incidents have skyrocketed in recent years, affecting not only businesses but also critical government infrastructure.
Pennsylvania's refusal to pay the attackers reflects a strategy that more and more public services are adopting. Paying ransoms, in addition to costing taxpayers money, fuels a vicious cycle, encouraging new attacks.
See also: Cephalus Ransomware: Exploits RDP for Home Access
However, non-payment does not mean that the consequences are painless. The recovery time, delays in court cases, and the possibility of data leaks create serious trust and functionality issues.
The bet on resilience
The Pennsylvania incident highlights the importance of investing in cybersecurity . From regular staff training to strengthening monitoring and rapid response systems , public agencies are being called upon to operate with standards comparable to the private sector.
Resilience to such attacks is not just a technological issue; it is an institutional obligation. As the digitalization of the public sector progresses, the need for robust protection measures becomes greater.
Source: www.bleepingcomputer.com
