[BreachExchange] Albany cyber attack affecting records, police

[Destry Winant]

https://www.timesunion.com/news/article/Albany-police-can-t-access-scheduling-system-13730578.php

All city services except for getting birth, death and marriage
certificates will resume Monday morning after a cyber attack over the
weekend, according to Mayor Kathy Sheehan.

Albany Mayor Kathy Sheehan said in a social media post Saturday that
the city experienced a ransomware cyber attack but didn't give details
about the extent of it.

A ransomware attack happens when a hacker accesses a system or
personal files, and demands a ransom for the victim to regain access.
Typically, ransomware hackers demand payment via cryptocurrency or
credit card.

"City officials have been working throughout the weekend responding to
this incident," Sheehan tweeted in an update late Sunday.

On Monday morning, city employees will report back to work as usual
and city court services will operate during normal business hours.
City buildings will be open to the public at 12:00 p.m.

Sheehan said all city services will be available except for obtaining
some certificates and licenses. She referred residents to the New York
State Vital Records Customer Service Lobby in Menands for birth, death
and marriage certificates. To apply for a marriage license, residents
can visit the Town clerks' offices in Troy, Colonie or Watervliet.

Other sources say the police department was also affected by the
attack. The vice-president of the police union posted on Facebook on
Sunday afternoon that police officers do not have access to
internet-dependent systems, CBS6 first reported.

Albany Police Officers Union Vice-President Gregory McGee wrote that
members do not have access to the scheduling system, departmental
email or other services or programs that operate by internet
connection. He explained this means members cannot see who is working
and what the manpower of each patrol is. He also said the attack
appears to be affecting computers in patrol cars in terms of incident
and accident reports, meaning calls for service may take longer than
expected.

Police spokesman Steve Smith said Sunday that the department remains
adequately staffed and there are no interruptions in service to the
community.

McGee questioned in his Facebook post why the police department with
sensitive information would be on the same network that he described
as "easily attacked."

"As of now, we have been left in the dark and have more questions than
answers. (Union) members have not been provided with details about
exactly what this attack has affected. I wish I could tell you that
your personal information was secure, but we as a union have not been
informed of the extent of the attack," McGee wrote.

City spokesman Brian Shea declined to comment further Sunday other
than referencing the mayor's social media posts.