Hacker attack on the Rhine-Palatinate district administration

It could take months until the district administration is able to function again, the letter continues. The district administration itself has no influence on what could happen to the stolen data sets. If the district administration accepts the payment request, the confidential data will still not be secure. The State Criminal Police Office and the Public Prosecutor General's Office in Koblenz are investigating. The attack itself probably happened .

If you visit the website, you as a user will receive a notice that the site cannot be reached due to a disruption following a cyber attack, as well as a reference to the open letter mentioned above:

The letter to the citizens

Disruption after cyber attack

October 31, 2022 - District Administrator Clemens Körner informs / Open letter to the population

Today I am turning to you with very unpleasant information:
The Rhine-Palatinate district administration was the victim of a hacker attack on its computer network. The group of attackers has reported themselves. This is a highly professional and organized group that has turned “cyber attacks” into a real “business model”.

A common method that has been used several times by companies and other public administrations is the use of so-called “ransomware”. This encrypted the data on the servers. Access to data and programs is no longer possible. Even the telephone system is out of service.

The criminals demand a ransom - usually paid in Bitcoins - in order to provide the victim with decryption software in return. This is intended to neutralize the attack. Otherwise, there is a risk of not just weeks – or even months of downtime and high costs. The protection of personal data is a high priority for us.  

In comparable cases from other city and district administrations, confidential or compromising data from and about residents as well as employees were published on the dark web, even though a ransom was paid. We are dealing with highly immoral criminals here. It is to be feared that this will also happen to us – or has already happened! You can assume that we meet a high security standard based on the current state of the art. But it remains to be noted that there is no such thing as 100% security against such criminal attacks!

Such attacks on well-known companies and administrations, such as the Bundestag, are repeatedly reported in the press.
It can literally happen to anyone. We will keep you updated via the press, official gazettes and our homepage. Our employees are working hard to restore the functionality of the district administration step by step. We ask for your understanding that this may take some time, even months.

The district administration has no influence whatsoever on what could improperly happen with the stolen data. I would like to apologize for any inconvenience this may cause citizens. I am sure that we will overcome this difficult situation together.  

Your District Administrator Clemens Körner 

Mimikama information

This is how a ransomware attack works: By infecting computers, whether in a company or a private individual, an attempt is made to extort ransom money

With this ransom or encryption Trojan, criminals exploit security gaps and smuggle malicious software onto the victim's computer. Such malware is so-called ransomware. It locks the computer, encrypts files and makes it unusable for its users.

The hackers then extort a ransom to unlock the computer and files. The approach is a form of blackmail. This is where the name ransomware comes from, because “ransom” means blackmail in English.

The malicious software is primarily distributed via email. The programs are sent as attachments disguised as harmless files. When the file is opened, the program begins to lock the computer. The owner then no longer has access to his computer and his files. The hackers then demand a ransom in order to unlock the computer again. The possible loss of data stored on the computer is also frightening for private individuals. After all, many files, such as photos and videos, have personal, emotional value. But important correspondence or, for example, bank statements could also have ended up in the hands of criminals. [ Continue reading… ]

Source: Rhine-Palatinate District

Also read: Recommendations for defending against cyber attacks with ransomware