SEDGWICK COUNTY —The city of Wichita reported Sunday that certain online city services may be unavailable as the thoroughly reviews and assess an incident that affected some of their computer systems, according to a media release.
As part of this assessment, the city turned off their computer network. The decision was necessary to ensure that systems are securely vetted before returning to service.
Frequently Asked Questions
What Happened? On May 5, 2024, certain City systems were encrypted by malware. In response, the computer network and systems were shut down to prevent the spread of the malware. Certain services may be temporarily unavailable while systems are offline. The City is enabling business continuity measures, where appropriate, to minimize disruption and is working with third-party specialists to safely and securely restore the computer network.
What is encryption malware? Encryption malware is a type of computer virus that locks files without permission. A third party then seeks payment for a key to unlock the computer files. This is often called ransomware, which uses computer software to lock files and withhold the key to unlock the files until a payment is made. Unfortunately, government organizations are often targeted by these groups.
Has law enforcement been notified? Yes, federal and local law enforcement authorities are assisting with this matter.
What group is claiming responsibility? This is not being shared for operational security purposes.
What is the impact on data? We are completing a thorough review and assessment of this matter, including the potential impact on data. Detailed assessments of these types of incidents take time. We thank you for your patience, understanding, and respect for the integrity of this review process.
Are first responders (Fire/Police) still providing services? Yes, they are. They are prepared for these matters and have switched to business continuity measures where appropriate to continue providing exceptional service.
When will systems be back online? We are working with specialists to thoroughly review and assess systems before putting them back online. Systems will be restored on a staggered basis to minimize disruptions. We do not have a definitive timeline for returning all systems to production.