Municipality of Olomouc

Summary

The Municipality of Olomouc suffered a paralyzing cyberattack that rendered all municipal services unavailable, requiring an estimated two weeks to fully restore operations. While the specific ransomware variant and attacker demands were undisclosed, the incident followed a prior thwarted attack on a local hospital, though no confirmed link between the two events was established.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 7, 2021, the Municipality of Olomouc in the Czech Republic experienced a paralyzing cyberattack that disrupted all municipal services. The attack rendered critical systems inoperable, forcing the immediate suspension of operations across administrative, public-facing, and potentially internal infrastructure. Municipal authorities responded by isolating affected systems to prevent further spread, though the specific technical mechanisms of the attack were not publicly disclosed. Service interruptions persisted following the initial containment, with no immediate timeline provided for restoration during the initial response phase. The municipality’s operational paralysis impacted residents’ access to essential services, though the precise scope of affected departments or systems beyond the broad "municipal services" designation was not detailed in available reporting. No citizen data compromise was explicitly mentioned, and authorities did not confirm whether data exfiltration occurred.

The municipality estimated a 14-day recovery timeline to fully restore services, indicating significant infrastructure damage or complex remediation efforts. Officials did not identify the ransomware variant involved or disclose whether attackers issued financial or operational demands. This incident followed an April 2020 cyberattack targeting a hospital in Olomouc, which was successfully thwarted without service disruption. While the article noted this prior regional threat activity, it emphasized no confirmed connection between the 2020 hospital incident and the 2021 municipal attack. Restoration efforts remained ongoing at the time of reporting, with no subsequent updates on final resolution or additional technical details provided through the cited sources.

Sources

Sources available to members: 1 source.