Ransomware attack leaves Cornelius residents dealing with delayed and unavailable services

The tranquil town of Cornelius, nestled on the shores of Lake Norman and home to approximately 32,000 residents, is grappling with the aftermath of a ransomware attack earlier this week. The incident has disrupted various services, leaving residents inconvenienced and concerned about the extent of the damage caused by the cyberattack.

On the evening of July 11, the town government discovered the cybersecurity breach, which was subsequently identified as a ransomware attack. According to official statements from the town government, swift action was taken by the Technology Operations (TechOps) Department to sever on-site technology from the network, effectively containing the threat and impeding its spread.

MaeLynn Joyner, the diligent communications manager for Cornelius, provided insight into the situation, stating that all on-site technology has been disconnected from the town’s network. She acknowledged that some services provided by the town may experience temporary unavailability or delays during the restoration process. Specifically, services dependent on phone communications or staff access to server-based files are expected to be most affected. However, Joyner emphasized that emergency services, including the crucial 911 hotline, remain operational and accessible.

While town officials have been forthcoming about the impact of the attack, the identity of the ransomware group responsible for the breach and the possibility of a ransom payment has been shrouded in secrecy. Joyner declined to disclose the details, leaving residents and experts wondering about the motives behind the attack and its potential implications for the town’s cybersecurity defenses.

Cornelius officials are collaborating closely with the North Carolina Local Government Information Systems Association (NCLGISA) and Mecklenburg County Emergency Management to mitigate the attack’s impact. Their joint efforts involve scanning and cleaning all affected devices before normal operations can resume, ensuring the restoration of essential services.

It is worth noting that North Carolina made headlines last year by becoming the first U.S. state to enact legislation prohibiting government entities from paying ransoms associated with ransomware attacks. This controversial measure aimed to deter cyber criminals by eliminating the financial incentive for targeting government organizations. However, the move sparked debates among cybersecurity experts, some of whom questioned whether it would inadvertently encourage ransomware groups to exploit organizations by threatening to leak stolen data and claim unverified ransom payments, thereby violating state law.