ALPHV ransomware gang strikes Florida's First Judicial Circuit

Notorious ALPHV (BlackCat) ransomware gang has claimed responsibility for targeting state courts within Northwest Florida, a part of the First Judicial Circuit.

The attack, which occurred last week, has raised concerns as the threat actors alleged they obtained sensitive personal information, including Social Security numbers and CVs of employees, including judges.

Furthermore, the ransomware group asserted control over a comprehensive network map of the court’s systems, complete with local and remote service credentials. Such claims align with the common tactics employed by ransomware gangs, who often threaten to leak stolen data online to pressure victims into negotiations or reopening discussions.

In this case, a notable development is the presence of Florida’s First Judicial Circuit’s data leak page on ALPHV’s website, indicating that the court either has not engaged in negotiations with the ransomware operation or has staunchly rejected the gang’s demands.

The Florida circuit court disclosed last week that it had initiated an investigation into the cyberattack that disrupted its operations on Monday morning, October 2. A statement published on the court’s website read, "This event will significantly affect court operations across the Circuit, impacting courts in Escambia, Okaloosa, Santa Rosa, and Walton counties for an extended period. The Circuit prioritizes essential court proceedings but will cancel and reschedule other proceedings and pause related operations for several days, beginning Monday, October 2, 2023."

While the investigation unfolds, judges in the affected counties have been actively communicating with litigants and attorneys regarding their weekly scheduled hearings. Importantly, the court authorities have confirmed that all facilities continue to operate without disruptions, although the court has not yet verified the ransomware attack claims made by the ALPHV gang.