The Kansas Judicial Branch has published an update on a cybersecurity incident it suffered last month, confirming that hackers stole sensitive files containing confidential information from its systems. In mid-October 2023, the Kansas courts authority disclosed a "Security incident" that impacted the availability of multiple systems, including the eFiling system attorney's use for document submission, electronic payment systems, and the case management systems used by district and appellate courts. An update posted on the Kansas Judicial Branch newsroom called the impact on these systems temporary and underlined the more dire aspect of the cyberattack by confirming a data breach. "While the impact on our information systems is temporary, the cybercriminals also stole data and threatened to post it to a dark web site if their demands were not met," reads the press release. "Based on our preliminary review, it appears the stolen information includes Office of Judicial Administration files, district court case records on appeal, and other data, some of which may be confidential under law." The situation holds the core elements of a typical ransomware attack, involving system outage caused by local file encryption and also double extortion threatening to publish stolen files if the ransom isn't paid. Still, the announcement does not specify the type of the attack. The Kansas authority estimates it'll need several weeks until all systems return to normal status. It promises to notify impacted individuals as soon as its review of the stolen data has been completed. The statement takes a more personal turn, calling this an attack "Against all Kansas" and characterizing the perpetrators as evil. "This assault on the Kansas system of justice is evil and criminal. Today, we express our deep sorrow that Kansans will suffer at the hands of these cybercriminals." - Kansas courts. At the time of writing, no known ransomware operations have publicly taken responsibility for the attack. Welltok data breach exposes data of 8.5 million US patients. Auto parts giant AutoZone warns of MOVEit data breach. Yamaha Motor confirms ransomware attack on Philippines subsidiary. Ransomware gang files SEC complaint over victim's undisclosed breach. Toronto Public Library confirms data stolen in ransomware attack.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Thu, 30 Nov 2023 23:19:27 +0000