--- title: City Systems Easy Pickings - Valeo Networks description: Cybercriminals See Municipalities as Low-hanging Fruit for Ransomware Attacks. What Can Be Done? image: https://blog.valeonetworks.com/hubfs/fruit-blog-apple-LG-1.webp --- [Skip to the main content.](https://blog.valeonetworks.com/city-systems-easy-pickings#main-content) [![Valeo-poweredbyForte-white](https://blog.valeonetworks.com/hs-fs/hubfs/Valeo-poweredbyForte-white.png?width=600&height=99&name=Valeo-poweredbyForte-white.png "Valeo-poweredbyForte-white")](https://valeonetworks.com) [![Valeo Networks Division Logos 2024](https://blog.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Valeo/Valeo%20Networks%20Division%20Logos%202024.png?width=960&height=290&name=Valeo%20Networks%20Division%20Logos%202024.png "Valeo Networks Division Logos 2024")](https://valeonetworks.com) - [Services](https://valeonetworks.com/our-services) - [CMMC Services](https://valeonetworks.com/cmmc-services) - [Managed IT Services](https://valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://valeonetworks.com/our-services/compliance/) - [Industries](https://valeonetworks.com/industries) - [Resources](https://valeonetworks.com/resources) - [Blog](https://blog.valeonetworks.com/) - [Data Sheets](https://valeonetworks.com/resources/datasheets/) - [Ebooks](https://valeonetworks.com/resources/ebooks/) - [Guides & White papers](https://valeonetworks.com/resources/guides-white-papers/) - [In The news](https://valeonetworks.com/in-the-news/) - [Our Services](https://valeonetworks.com/our-services) - [Webinars & Videos](https://valeonetworks.com/resources/webinars-videos/) - [E-Waste](http://valeonetworks.com/resources-e-waste) - [About](https://valeonetworks.com/about) - [Our Story](https://valeonetworks.com/our-story) - [Leadership](https://valeonetworks.com/about/leadership/) - [Partners](https://valeonetworks.com/about/partners/) - [Success Stories](https://valeonetworks.com/success-stories/) - [Contact](https://valeonetworks.com/contact) - [Careers](https://valeonetworks.com/about/careers/) - [Locations](https://valeonetworks.com/contact/locations/) - [Support](https://valeonetworks.com/client-portal/) [888-806-3601](tel:888-806-3601) [Client Portal](https://portal.Valeonetworks.com) Toggle Menu Toggle Menu [888-806-3601](tel:888-806-3601) [Client Portal](https://portal.Valeonetworks.com) - [Services *Toggle Menu*](https://valeonetworks.com/our-services) - [CMMC Services](https://valeonetworks.com/cmmc-services) - [Managed IT Services](https://valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://valeonetworks.com/our-services/compliance/) - [Industries](https://valeonetworks.com/industries) - [Resources *Toggle Menu*](https://valeonetworks.com/resources) - [Blog](https://blog.valeonetworks.com/) - [Data Sheets](https://valeonetworks.com/resources/datasheets/) - [Ebooks](https://valeonetworks.com/resources/ebooks/) - [Guides & White papers](https://valeonetworks.com/resources/guides-white-papers/) - [In The news](https://valeonetworks.com/in-the-news/) - [Our Services](https://valeonetworks.com/our-services) - [Webinars & Videos](https://valeonetworks.com/resources/webinars-videos/) - [E-Waste](http://valeonetworks.com/resources-e-waste) - [About *Toggle Menu*](https://valeonetworks.com/about) - [Our Story](https://valeonetworks.com/our-story) - [Leadership](https://valeonetworks.com/about/leadership/) - [Partners](https://valeonetworks.com/about/partners/) - [Success Stories](https://valeonetworks.com/success-stories/) - [Contact *Toggle Menu*](https://valeonetworks.com/contact) - [Careers](https://valeonetworks.com/about/careers/) - [Locations](https://valeonetworks.com/contact/locations/) - [Support](https://valeonetworks.com/client-portal/) 3 min read # City Systems Easy Pickings [Valeo Networks](https://blog.valeonetworks.com/author/valeo-networks) : Jul 2, 2019, 12:00:00 AM [Managed IT Services](https://blog.valeonetworks.com/tag/managed-it-services) ## Cybercriminals SeE Municipalities as Low-hanging Fruit for Ransomware Attacks For two weeks in mid-June, hackers held Lake City hostage. A ransomware attack locked down the north-central Florida municipality’s entire computer network, taking email offline and disabling the internet-based phone system. The town’s 6,500 residents found themselves cut off, unable to pay utility bills or process building permits. The hackers demanded a bitcoin payment of $500,000 to unlock the networks. As municipal services ground to a halt, the city felt it had no choice but to pay. It turned out that Lake City wasn’t alone in being targeted. Just south on Florida’s Turnpike in Riviera Beach and Key Biscayne, hackers demanded and received $600,000 each on separate, but similar attacks. The recent attacks weren’t limited to smaller cities. Atlanta and Baltimore paid out millions, both in ransom and recovery costs, following [ransomware attacks](https://www.valeonetworks.com/a-managed-approach-to-shutting-down-the-ransomware-bandits/) over the last 12 months. Early on, corporations had been the primary prey of ransomware bandits. Targeting of the public sector is a relatively new phenomenon, but one that has garnered [heightened attention from the media](https://www.cnbc.com/2019/06/26/baltimore-florida-ransomware-attacks-kick-off-new-era-for-ransomware.html). A [recent report estimated](https://www.recordedfuture.com/state-local-government-ransomware-attacks/) that more than 170 state and local governments fell victim to ransomware attacks over the last five years. While six-figure ransom demands have become commonplace, the true cost of these attacks reaches far beyond the ransom payment itself. Atlanta shelled out $52,000 to hackers following a 2018 ransomware attack. However, the city estimates that total cost of the attack to date is closer $7.2 million. According to Mayor Keisha Bottoms, the attack knocked almost all city agencies offline, affecting everything from scheduling court cases to online bill payment, and caused decades of official correspondence to vanish.   [![New call-to-action](https://blog.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/442def81-413f-4b06-89de-5ecbef2336d7-1.png)](https://cta-redirect.hubspot.com/cta/redirect/4976587/442def81-413f-4b06-89de-5ecbef2336d7) ## Low-Hanging Fruit Corporations responded to the initial wave of ransomware attacks by strengthening their cyber defenses. Governments, particularly on the local and state level, have been slower to react. In the race to build out municipal cyber infrastructure, some entities have skimped on security measures. “Government knows it needs to change, but they move slowly compared to how quickly private business can pivot to manage their exposure to a new threat,” said Gary Hayslip, a cybersecurity expert and former chief information security officer for the City of San Diego. “Until it is mandated that cities, counties and states meet a specific level of security and have to periodically demonstrate it as is done in business for compliance, government entities will continue to be low-hanging fruit and cybercriminals don’t mind eating them for lunch.” Cybercriminals zero in on targets that require the least effort while offering the largest potential reward. Cities often fit this description, according to AttackIQ’s Chris Kennedy who says [municipalities will often wait to upgrade](https://news.vice.com/en_us/article/vb9p5b/us-cities-are-under-attack-from-ransomware-and-its-going-to-get-much-worse) outdated infrastructure. “(Cities) chug along on this old legacy infrastructure, and that old legacy infrastructure is the stuff that is often exploited,” Kennedy says. Another problem unique to state and local government has to do with personnel. Cities and their in-house IT staff are often overstretched, understaffed and underfunded. “It can be an overwhelming problem if you’re not adequately staffed,” Kennedy said. [![New call-to-action](https://blog.valeonetworks.com/hs-fs/hubfs/Blog%20Images/Imported_Blog_Media/637ee9a3-c0b3-4440-829f-b62714350fac-1.png?width=800&height=303&name=637ee9a3-c0b3-4440-829f-b62714350fac-1.png)](https://cta-redirect.hubspot.com/cta/redirect/4976587/637ee9a3-c0b3-4440-829f-b62714350fac)   ## What Can be Done? Once a government entity is hit with a ransomware attack, its options are extremely limited. Law enforcement officials almost universally recommend against paying off the cybercriminals, arguing that this only invites future attacks. While refusing to pay the hackers may prevent later harassment, it can also significantly burden on the effected institution. For many cities, time equals money. The longer IT services remain down, the greater the financial damage. As recent events illustrate, many municipalities opt to pay the ransom. While insurance may cover most of the cost of the ransom payment, it might not come close to covering the collateral damage these attacks can inflict. “Hallmarks of a good [cyber insurance plan](https://www.valeonetworks.com/why-would-you-need-cyber-insurance-consider-the-risks/) or policy would include not only coverage for damage to systems or damage to data, but fraud coverage, extortion coverage, coverage for breach response, public relations expense,” said Jonathan Meyer, partner at law firm Sheppard Mullin and former deputy general counsel in the Department of Homeland Security. Ultimately, the best insurance may come in the form of proactive measures taken to harden a city’s cybersecurity posture while laying out contingencies to reduce damage and protect critical data. Center for Technology Innovation fellow Niam Yaraghi recently wrote in an [article for the Brookings Institute](https://www.brookings.edu/blog/techtank/2019/06/11/how-can-city-governments-protect-themselves-against-ransomware-attacks/), “The best defense against ransomware attacks is putting basic security safeguards in place. It will most likely dissuade hackers that are after a quick buck and are not motivated to spend time hacking into a secure system while there are easier targets out there.” Federal cybersecurity experts have also taken notice of these localized ransomware attacks. The Department of Homeland security recently released a [set of security recommendations](https://www.msspalert.com/cybersecurity-breaches-and-attacks/ransomware/dhs-on-ransomware-protection-separate-backups-security-training-key/) to help protect private and public organizations of all sizes, which includes the following steps: - Regularly deploy computer patches and updates - Avoid clicking web links from unknown sources - Do not submit personal information to websites unless they encrypt their data - Stay on top of the latest cybersecurity news and trend - Deploy robust set of cybersecurity protections, including antivirus software, firewalls and other solutions A qualified [managed service provider](https://www.valeonetworks.com/industries/municipalities/) that understands the unique needs of government clients can help implement all of the above recommendations. These consultants can perform a thorough assessment of the city’s security posture and implement the appropriate safeguards and policies that harden defenses, sending would-be hackers looking elsewhere for “softer” targets. > [Contact Valeo Networks](https://www.valeonetworks.com/contact/) to learn more about our security services geared to the needs of government and municipal clients. - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://blog.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![Stay Alert to These Modern Cybersecurity Threats](https://blog.valeonetworks.com/hubfs/Prominent-CybersecurityIssues-2-1%20(1)%20(1).webp)](https://blog.valeonetworks.com/modern-cybersecurity-threats) #### [Stay Alert to These Modern Cybersecurity Threats](https://blog.valeonetworks.com/modern-cybersecurity-threats) [Valeo Networks](https://blog.valeonetworks.com/author/valeo-networks) : Jul 3, 2020, 4:00:00 AM The business world is becoming increasingly dependent on digital structure and assets. In 2020, it is imperative that your organization stay aware of... [Managed IT Services](https://blog.valeonetworks.com/tag/managed-it-services) [Read More](https://blog.valeonetworks.com/modern-cybersecurity-threats) [![How Ransomware Attackers Will Start Targeting Household Items, Like Your Smart TV](https://blog.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/Valeo-May-16-2023-06-59-18-8556-PM-Oct-10-2023-03-24-58-2578-PM.jpg)](https://blog.valeonetworks.com/how-ransomware-attackers-will-start-targeting-household-items-like-your-smart-tv) #### [How Ransomware Attackers Will Start Targeting Household Items, Like Your Smart TV](https://blog.valeonetworks.com/how-ransomware-attackers-will-start-targeting-household-items-like-your-smart-tv) [Valeo Networks](https://blog.valeonetworks.com/author/valeo-networks) : Mar 20, 2017, 12:00:00 AM For those who are not familiar with ransomware or how it works, it is a kind of malware that locks critical digital resources and forces the owner to... [Managed IT Services](https://blog.valeonetworks.com/tag/managed-it-services) [Read More](https://blog.valeonetworks.com/how-ransomware-attackers-will-start-targeting-household-items-like-your-smart-tv) [![Betting on Layered Security](https://blog.valeonetworks.com/hubfs/5613959_mGambling_123RF-1.webp)](https://blog.valeonetworks.com/betting-on-layered-security) #### [Betting on Layered Security](https://blog.valeonetworks.com/betting-on-layered-security) [Valeo Networks](https://blog.valeonetworks.com/author/valeo-networks) : Oct 11, 2018, 12:00:00 AM The Cybersecurity Deck is Stacked Against SMBs [Managed IT Services](https://blog.valeonetworks.com/tag/managed-it-services) [Read More](https://blog.valeonetworks.com/betting-on-layered-security) ![White](https://blog.valeonetworks.com/hs-fs/hubfs/White.png?width=302&height=124&name=White.png)   With cutting-edge technology and quality customer service, you’ll find everything you need to help your company soar with Valeo Networks.   ##### Explore Valeo Explore Valeo - [Our Services](https://valeonetworks.com/our-services) - [Industries](https://valeonetworks.com/industries) - [Resources](https://valeonetworks.com/resources) - [About](https://valeonetworks.com/about) - [Contact](https://valeonetworks.com/contact) ##### Our Locations Our Locations - [Arizona](https://valeonetworks.com/locations/arizona/) - [California](https://valeonetworks.com/locations/california/) - [Florida](https://valeonetworks.com/locations/florida) - [Iowa](https://valeonetworks.com/locations/iowa/) - [Michigan](https://valeonetworks.com/locations/michigan/) - [Oregon](https://valeonetworks.com/locations/oregon/) - [Pennsylvania](https://valeonetworks.com/locations/pennsylvania/) - [Washington](https://valeonetworks.com/locations/washington/) ##### Contact Contact [888-806-3601](tel:8888063601) [info@valeonetworks.com](mailto:info@valeonetworks.com) 1006 Pathfinder Way Rockledge, FL 32955 Business Hours: M-F: 8AM-9PM [![Valeo-poweredbyForte-white](https://blog.valeonetworks.com/hubfs/Valeo-poweredbyForte-white.png)](https://valeonetworks.com) - [Privacy Policy](https://valeonetworks.com/privacy-policy/) © 2026 Copyright Valeo Networks. All Rights Reserved. [*Facebook*](https://www.facebook.com/ValeoNetworks/)[*Twitter*](https://twitter.com/valeonetworks?lang=en)[*Instagram*](https://www.instagram.com/valeonetworks/)[*LinkedIn*](https://www.linkedin.com/company/valeo-networks-inc-/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Valeo Networks", "url" : "https://blog.valeonetworks.com/author/valeo-networks" }, "dateModified" : "2024-01-23T13:57:06.891Z", "datePublished" : "2019-07-02T04:00:00.000Z", "headline" : "City Systems Easy Pickings - Valeo Networks", "image" : [ "https://blog.valeonetworks.com/hubfs/fruit-blog-apple-LG-1.webp" ], "mainEntityOfPage" : { "@id" : "https://blog.valeonetworks.com/city-systems-easy-pickings", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.valeonetworks.com/hubfs/Valeo_Networks_LogoFinal_Color-1.png" }, "name" : "Valeo Networks" } } ```