Kansas courts confirm data theft, ransom demand after cyberattack - BleepingComputer.com
2023-11-22 13:46 (EST)
The Kansas Judicial Branch has published an update on a cybersecurity incident it suffered last month, confirming that hackers stole sensitive files containing confidential information from its systems.
In mid-October 2023, the Kansas courts authority disclosed a "security incident" that impacted the availability of multiple systems, including the eFiling system attorneys use for document submission, electronic payment systems, and the case management systems used by district and appellate courts.
Over a month later, the system status remains unchanged, with the following services flagged as currently offline:
Kansas Courts eFiling: For electronic document filing
Kansas Protection Order Portal: For electronic document filing
Kansas District Court Public Access: For searching district court cases
Appellate Case Inquiry System: For searching appellate court cases
Kansas eCourt Case Management: Used by district courts for case processing
Kansas Attorney Registration: For searching attorneys by name or bar number
Kansas online marriage license application
Central Payment Center
An update posted on the Kansas Judicial Branch newsroom called the impact on these systems temporary and underlined the more dire aspect of the cyberattack by confirming a data breach.
"While the impact on our information systems is temporary, the cybercriminals also stole data and threatened to post it to a dark web site if their demands were not met," reads the press release.
"Based on our preliminary review, it appears the stolen information includes Office of Judicial Administration files, district court case records on appeal, and other data, some of which may be confidential under law."
The situation holds the core elements of a typical ransomware attack, involving system outage caused by local file encryption and also double extortion threatening to publish stolen files if the ransom isnt paid. Still, the announcement does not specify the type of the attack.
The Kansas authority estimates itll need several weeks until all systems return to normal status. It promises to notify impacted individuals as soon as its review of the stolen data has been completed.
The statement takes a more personal turn, calling this an attack "against all Kansas" and characterizing the perpetrators as evil.
"This assault on the Kansas system of justice is evil and criminal. Today, we express our deep sorrow that Kansans will suffer at the hands of these cybercriminals." - Kansas courts.
At the time of writing, no known ransomware operations have publicly taken responsibility for the attack.
