Previously:

• Homeland Security, FBI Spearhead Curry County Ransomware Attack Investigation; More On The EOC's Role In Rebuilding The Network

• Despite Having to 'Start Over' After Last Month's Cyber Attack, Curry County Government is 'Continuing,' Brad Alcorn Says

###

From Curry County:

The following is an update from the County Board of Commissioners on the work we are doing to recover from the April 26 ransomware attack:

The ransomware attack affected the county computer system. We still do not have the ability to use our computer network or devices, including staff email. We are asking the public to reach out to the county to confirm existing reservations, appointments and commitments as employees are unable access calendars and contact lists.

Please know we are working to get our systems back online as quickly and safely as possible. At this time, we do not have an estimated time for service to be restored. Please contact us by phone or drop by in person so we can assist you.

Our IT staff are working with computer experts to back up and recover our systems with assistance from Microsoft techs. We are making good progress every day, but it is a long, complex process. We must essentially rebuild our network from the ground up and implement multi-factor authentication for all devices. A methodical approach with appropriate security measures is key to recover from this incident and prevent future occurrences.

We are pleased to report that the counting of votes for the May 16 election was not affected. We worked directly with the office of the Secretary of State to ensure systems were intact prior to counting and reporting votes. Results are available here: https://results.oregonvotes.gov/.

Our emergency dispatch system is in service. While some non-essential computer functions were affected, we have remained capable of receiving 911 calls and dispatching emergency services. Do not hesitate to call for help when it is needed.

We have had an emergency operation center (EOC) in place since May 4 with emergency staff working directly with county leaders.

The structure is similar to what we see during a major wildfire incident. In fact, most of the people currently staffing the EOC are from the Oregon Department of Forestry. Dozens of other personnel from other county, state and federal agencies have been involved. We are incredibly fortunate to have expert help as we work through this incident.

All our offices remain open for business, although there are some functions we cannot perform until our computers are restored. The local real estate community has seen a specific impact because the county is not able to file titles and other documents. We know it is frustrating to experience delays in the services we normally provide. If you have any questions, please contact us by phone or in person.

The county’s online database of deeds and other recorded
instruments is not currently available. However, the County Clerk and Recording Office
continues to record deeds and other records by hand. If you need a copy of a deed or other
document that has previously been recorded, please contact them at (541) 247-3295 or stop
by the office.

The state and federal investigation continues. Cyberattack investigations are complex and time-consuming. We are not the only organization to be targeted for a ransomware attack like this; the information gleaned from this investigation will help inform other investigations, and vice versa. Specific details about how the ransomware was introduced to our system and any demands for payment are not available for release at this stage in the investigation.

We have heard concerns about the security of information like tax records and other data. There is still a lot we are learning about the impact of this incident. We will provide information when we know more. In the meantime, experts suggest using a credit monitoring or similar application to watch for fraudulent activity.

While incidents of this type move slowly, we are committed to keeping you informed. Commissioner Brad Alcorn has provided live video updates via Facebook. A link to the latest video is available on the Curry County Government Facebook page. Watch for more updates in the future. We will also post service outage updates on the Curry County website: https://www.co.curry.or.us/.

Our leaders and staff thank everyone for their patience and support. We are a resilient community and we will come out of this better and stronger. Please join us in thanking all the people who are working behind the scenes to help our community.

SHARE →