City of Lakewood targeted by ALPHV ransomware group

• Ransomware group: ALPHV
• Country: United States
• Sector: Government & Defense
• Announcement date: July 26, 2023

ALPHV claims data leak involving City of Lakewood

The ALPHV ransomware group has published an announcement on its leak site claiming to have leaked 300 GB of data belonging to the City of Lakewood. This announcement, which was posted on July 26, 2023, follows a period of alleged unauthorized access to the municipal entity's systems.

Details of the alleged breach

According to the claims made by the ALPHV (also known as BlackCat) group, they successfully breached the systems of the City of Lakewood. The threat actors have stated that the negotiation process with the organization was unsuccessful, leading to the decision to release the stolen information publicly. The group further alleges that the vulnerabilities within the institution's network remain unpatched, suggesting that the underlying security flaws that allowed the initial entry may still exist.

The timeline provided by the threat actor indicates that the claimed attack occurred on February 22, 2023. This discrepancy between the claimed attack date and the announcement date highlights the common delay often seen in ransomware operations, where actors may spend months attempting to negotiate or exfiltrate data before moving to the public leak phase.

Data involved in the leak

The specific content of the leaked data has not been detailed by the group. However, a screenshot provided by the threat actor shows a data package totaling 252 GB that has been uploaded to their site. While the total size of the compromised data is stated to be 300 GB, the listing does not name any specific data types or categories of information.

About the City of Lakewood

Lakewood is a city located in Pierce County, Washington, United States. It functions as a municipal government entity that is responsible for providing various local public services to its residents.

Risk assessment and organizational implications

This breach may pose a risk of exposure for citizen data or sensitive administrative information held by the local government entity, the City of Lakewood. The leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing attacks. Because the ALPHV group employs Rust-based ransomware methods, their techniques have the potential to disrupt operational systems within an organization.

Under US state laws and federal regulations, public institutions may be subject to transparency and notification requirements in the event of a data breach. This highlights the regulatory pressure faced by government entities following such incidents. To mitigate the impact of such attacks, organizations often find it necessary to review their network security against potential secondary attacks and inform the affected parties.

In the broader context of modern cyber threats, ransomware groups often employ a