Cyber Incident Victim: Broward County
Date:
Jan 2022
Location:
United States of America
Summary
A ransomware attack targeted a South Florida city government, disrupting access to certain computer systems and prompting engagement with third-party specialists to investigate the incident and restore operations. Authorities including the FBI and U.S. Secret Service were notified, while potential compromises of personal information remained under assessment with commitments to notify affected individuals if identified. The incident occurred amid a broader regional pattern of cyberattacks, including prior breaches at local educational and healthcare institutions involving data theft and extortion attempts. System disruptions were reportedly resolved within a short timeframe, though full restoration efforts continued.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around January 13, 2022, the City of Pembroke Pines experienced a ransomware attack that compromised its computer systems. City spokeswoman Marianne Wohlert confirmed the incident disrupted municipal operations by restricting access to certain critical systems, though specific affected services were not publicly disclosed. The attack prompted immediate engagement with third-party cybersecurity specialists to investigate the breach's nature, scope, and to coordinate secure system restoration. Authorities reported the incident to federal law enforcement agencies, including the FBI and U.S. Secret Service, consistent with cybercrime protocols. Internal communications to city commissioners indicated systems were offline only briefly, though the full operational impact duration remained unspecified. The city withheld confirmation regarding potential data breaches involving personal information, stating affected individuals would receive notifications if investigations revealed compromised data. No police incident report was filed, and direct comments from the city manager or mayor were unavailable.
This incident occurred amid a surge of cyberattacks targeting South Florida public entities. Broward County Public Schools suffered a separate ransomware attack by the Conti group between November 2020 and March 2021, where hackers demanded payment to prevent data leaks. After the district’s $500,000 ransom offer was rejected, attackers publicly released stolen files containing sensitive information, prompting the district to provide credit monitoring and identity theft protection. Separately, Broward Health disclosed a major October 2021 breach where an intruder accessed its network via a third-party medical provider’s credentials, exposing patients’ and employees’ personal, financial, and medical records. These incidents collectively underscored systemic vulnerabilities in regional public infrastructure, though Pembroke Pines maintained its investigation focused solely on restoring operations and determining data exposure without confirming direct links to prior attacks.