Oregon DEQ won’t say if ransomware group took employee data in cyberattack

The Oregon Department of Environmental Quality (DEQ) has declined to confirm if a recent cyberattack, attributed to the ransomware group Rhysida, resulted in the theft of employee data. Despite reports claiming that sensitive information was auctioned off, DEQ states they are still investigating the claims.

Initially reported on April 9, the cyberattack severely disrupted operations, leading to a temporary shutdown of vehicle emissions inspection stations. While operations have since resumed, the DEQ has maintained that they found no evidence of a data breach.

However, Rhysida claims to have stolen over 2.5 terabytes of data and is allegedly demanding a ransom of 30 bitcoin (£2.5 million). DEQ has not confirmed any ransom demands or communications with the group.

Key Points

  • The DEQ remains uncertain about a potential data breach following a ransomware attack.
  • Ransomware group Rhysida claims responsibility, alleging they stole sensitive employee data.
  • Operations at the DEQ were significantly disrupted, including a shutdown of vehicle emissions inspections.
  • Claims of data theft include a demand for a ransom, although DEQ has not publicly acknowledged this.
  • Investigation into the incident is ongoing, amidst reports from cybersecurity sources.

Why should I read this?

If you’re interested in cybersecurity or how public agencies handle data breaches, this article sheds light on a current affair that emphasises the potential risks organisations face from cyberattacks. Plus, it keeps you informed on the ongoing issues surrounding employee data security, especially relevant in an era where data breaches are increasingly prevalent.