A central Ontario town plans to pay off a hacker who was able to lock down the town鈥檚 computer system.
The Town of Midland has not had full access to its computer system since Sept. 1, including during a 48-hour period in which all computers connected to the municipal network were unusable.
At issue is a ransomware scam, in which a computer system is taken over remotely. It typically happens when a user unknowingly opens a malicious email attachment.
鈥淲e had some very large players come in and take advantage of Midland,鈥� Mayor Gord McKay said.
Ransomware attacks have become a fast-growing business for hackers. from U.S. cybersecurity firm RiskIQ found that around the world, one organization falls victim to a ransomware scam approximately every 40 seconds, at an average cost to the organization of more than $15,000.
The attacks are also considered relatively easy to launch, with instructions and do-it-yourself kits available via the dark web.
鈥淓ven people with low technical skill can get into this racket,鈥� Claudiu Popa, a Toronto-based cybersecurity expert, told CTV News.
The town鈥檚 financial processing system was significantly affected by the hack. A sign posted at the Town Hall building informed residents that the town could not accept payments via debit or credit cards.
According to McKay, there are no indications that personal data of Midland residents was accessed improperly.
鈥淎s far as we know, there鈥檚 been no information revealed,鈥� the mayor said.
The hacker demanded an undisclosed number of Bitcoins as payment for releasing their grip on the town鈥檚 computers. Negotiations are ongoing, and town officials declined to comment on the exact payment amounts being discussed.
Also unclear is exactly who was behind the hack or how much dealing with it cost the town. The direct cost of paying off the hacker will be covered by the town鈥檚 insurance company.
The nearby town of Wasaga Beach, Ont., was hit by a similar attack this spring. Government data was inaccessible for several weeks as the town negotiated the ransom demand down from the Bitcoin equivalent of $144,000 to about $35,000 worth of the cryptocurrency. The town pegged the overall cost of the attack at more than $250,000.
Midland moved to secure an insurance policy against ransomware attacks after learning of what had happened in Wasaga Beach. Other measures the town took included an upgrade to its firewall system, which was nearly complete when the attack hit earlier this month.
The municipal computer system has slowly been returning to normal this week as negotiations with the hacker have continued.
Officials hope the system will be fully restored within the next few days, and are planning cybersecurity upgrades to make repeat attacks more difficult.
Ultimately, though, there is no security measure which will make any town鈥檚 network completely invulnerable to ransomware attacks 鈥� something which has officials in Midland describing a second attack as 鈥渁 matter of when, not if.鈥�
With reports from CTV鈥檚 John Vennavally-Rao and CTV Barrie鈥檚 Mike Arsalides
