City of Pembroke Pines

Summary

A ransomware attack targeted Pembroke Pines, briefly disrupting city systems and hindering access to critical computer networks. The incident prompted collaboration with cybersecurity specialists to restore operations, though potential data theft remains unconfirmed. Authorities including the FBI and Secret Service were notified of the intrusion. While system downtime was resolved quickly, the event reflects broader regional cybersecurity challenges faced by neighboring entities.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On or around January 13, 2022, Pembroke Pines, Florida, experienced a ransomware attack that disrupted municipal operations by briefly knocking city computer systems offline. City spokeswoman Marianne Wohlert confirmed the incident’s occurrence date, though the specific intrusion method and initial attack vector remained undisclosed. The ransomware compromised the city’s ability to access critical systems, forcing operational adjustments. Officials characterized the event as a criminal act wherein attackers encrypted network data to extort payment, though no ransom demands or payment discussions were publicly disclosed. Internal staff collaborated with unspecified cybersecurity specialists to restore functionality, prioritizing system recovery while assessing the scope of compromise. The city’s computer downtime was described as brief, with commissioners acknowledging a relatively swift resolution to the immediate technical disruption.

Pembroke Pines reported the incident to federal law enforcement agencies, including the FBI and Secret Service, aligning with standard protocols for cybercrime involving critical infrastructure. The attack’s broader implications—particularly regarding potential theft or exposure of resident or employee personal data—were not confirmed, leaving data breach risks unresolved in public communications. No specifics emerged about which municipal departments or services bore the brunt of the disruption, though the city’s general acknowledgment suggested multi-system involvement. The incident echoed recent ransomware events in South Florida, including Broward County Public Schools’ ransom payment and Broward Health’s patient data exposure, though no direct connection between these cases was asserted. Restoration efforts dominated the response, with no post-incident disclosures about residual vulnerabilities, attacker identification, or long-term operational changes.

Sources

Sources available to members: 2 sources.