Last week, Southampton County, Virginia began informing residents that their personal information may have been compromised by a ransomware attack. The incident became known in September, when hackers gained access to a server with data on the residents of the district and encrypted the data stored on it.
The Southampton administration said that immediately after the discovery of the cyber attack, the IT team took steps to localize it and launched an investigation to determine the type of compromised data. The investigation showed that the names, addresses, driver's license numbers and social security numbers of the county's residents fell into the hands of the attackers. The letter says that the administration does not have accurate information about whether the attackers were able to remove residents' personal information from the server, but there is accurate confirmation that the cybercriminals posted some information on the dark web.
It is known that the LockBit 3.0 group is behind the attack on the district, which boasted of this on its website. True, as a confirmation of their words, the attackers provided only a few screenshots, which contained the names of folders with the data of Southampton residents. For deleting all information or downloading all stolen LockBit requires $ 90,000.