Hamilton, one of Ontario's largest cities, is currently grappling with a cyber attack, now in its second day. The municipality, home to around 570,000 residents and situated on the shores of Lake Ontario, announced on Sunday that it was experiencing a city-wide disruption to its phone and email services. This interruption affected various municipal and public library services, including the Bus Check Info Line and the HSRNow transit planning app.
As of today, the city has reclassified the issue from a mere disruption to a full-fledged cyber incident. However, despite these challenges, bus services resumed as scheduled on Monday, and transit schedules are available on the city's website.
In an official statement released on its website on Monday, the city revealed that experts are actively investigating the incident to determine its cause and potential impacts. The primary focus is to safeguard the integrity of the city's systems and protect any sensitive or private information that may have been compromised.
The city has assured the community that it is taking the matter seriously and is working closely with cybersecurity experts and relevant authorities to address the issue as quickly and effectively as possible. It also emphasized its commitment to transparency, promising to provide updates as new information becomes available. The city apologized for any inconvenience caused by the incident and reiterated its dedication to protecting the privacy and security of its residents while managing the impact on city service levels.
Cybersecurity experts warn that local governments, including provincial, state, and municipal entities, are often targeted by threat actors due to their less robust IT infrastructure and perceived susceptibility to paying ransoms for stolen data. Some attacks are opportunistic, where hackers exploit vulnerabilities in IT systems.
A report by cybersecurity awareness training supplier KnowBe4 on the economic impact of cyber attacks on U.S. municipalities highlighted that many attacks begin with low-tech phishing emails. This underscores the importance of ongoing cybersecurity awareness and training.
The City of Toronto's public library system, for instance, is still recovering from a ransomware attack that occurred in October. The attack forced the library to rebuild its network, and sensitive information, including names and Social Insurance numbers dating back to 1998, was copied by the attacker.
The incident in Hamilton serves as a reminder of the ongoing cybersecurity challenges faced by local governments and the critical need for robust cybersecurity measures to protect sensitive information and maintain essential services.