Village of Key Biscayne

Summary

The Village of Key Biscayne experienced a cyberattack described as a "data security event," prompting temporary shutdowns of computer systems and a shift to paper-based operations during recovery. Network functionality was restored within days, aided by an external IT vendor funded through emergency council-approved resources. This incident occurred amid a broader wave of cyberattacks targeting Florida municipalities, including Riviera Beach and Lake City, which faced confirmed ransomware incidents involving ransom payments. The village's response focused on forensic investigation and operational restoration without confirming ransomware involvement.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 23, 2019, the Village of Key Biscayne, Florida, experienced a cyberattack described by officials as a "data security event." The incident prompted immediate operational disruptions, leading the municipality to temporarily shut down portions of its computer systems as a precautionary measure. Village Manager Andrea Agha confirmed the implementation of paper-based processes to maintain essential services during the outage. Forensic teams were engaged to investigate the scope and nature of the attack. By June 26, the village restored network operations, indicating a containment period of approximately three days. The emergency response required coordination with external IT specialists to manage recovery efforts.

The Village Council convened an emergency session on June 27 to address financial requirements for ongoing incident response, approving additional funding for the external IT vendor assisting with recovery. While the exact financial allocation remained undisclosed, the emergency measure underscored the operational urgency. The incident occurred amid a wave of cyberattacks targeting Florida municipalities, including Riviera Beach and Lake City, both of which publicly acknowledged ransomware infections and paid ransoms after failing to restore encrypted systems. Key Biscayne officials notably refrained from attributing the event to ransomware or disclosing data compromise specifics. No evidence suggested the village paid ransom demands, distinguishing its response from neighboring jurisdictions facing similar threats during that period.

Sources

Sources available to members: 1 source.