Dakota Carrier Network Hit by Ransomware Attack

Dakota Carrier Network, a consortium of 14 independent broadband companies in North Dakota, suffered a ransomware attack in which some of its files were published on a hacker-operated website. The attack was detected early last Sunday morning, but the organization was able to respond quickly and restore its data from a backup tape. The hackers, behind the Maze ransomware, stole administrative data, including invoices, payroll information, and vendor lists, but no sensitive personal information was exposed. The incident has highlighted the increasing threat of ransomware attacks, particularly against IT providers and public services.

Key Takeaways:

  • Dakota Carrier Network (DCN) was a victim of a ransomware attack that included the publication of some of its files on a hacker-operated website.
  • The attack was detected early last Sunday morning, and DCN was able to respond quickly, restoring its data from a backup tape.
  • The hackers, behind the Maze ransomware, stole administrative data, including invoices, payroll information, vendor lists, and password-reset requests, but no sensitive personal information was exposed.
  • The breach also included a photograph of Queen lead singer Freddie Mercury, which was unrelated to the organizational data.
  • DCN's CEO, Seth Arndorfer, stated that the attackers only stole administrative data and that there was no disruption to its fiber services, which reach about 164,000 customers across the state.
  • Microsoft research has found that Maze ransomware frequently targets IT providers and public service providers, often using phishing emails or brute-force attacks.
  • Ransomware actors, including Maze, have increased their attacks against critical services like IT and healthcare as the COVID-19 pandemic has spread across the globe.
  • Activity on DCN's network has increased between 25 percent and 30 percent over the past five weeks.
  • The North Dakota Information Technology Department did not respond to a request for comment, however, DCN's authorized contacts with the State of North Dakota have all been notified of the situation.

Statistics:

  • 164,000: The number of customers across the state that DCN's fiber services reach.
  • 25-30%: The increase in activity on DCN's network over the past five weeks.
  • 40,000 miles: The collective length of fiber owned by DCN's 14 independent broadband companies.
  • 14: The number of independent broadband companies that make up Dakota Carrier Network.
  • 400: The number of public-sector entities, including city, town, and county governments; K-12 schools; libraries; and the state university system, that are customers of DCN.

Sources:

  • Microsoft research
  • StateScoop
  • Legal Monitor Worldwide
  • SyndiGate Media Inc. (Syndigate.info)