The City of Arkansas City is pleased to announce that as of Dec. 18, 2024, the Water Treatment Facility has returned to regular operations following a comprehensive recovery process following a ransomware attack on September 22, 2024. On September 22, 2024, City of Arkansas City staff identified a ransomware attack targeting the Water Treatment Facility’s primary server. The attack, using a variant known as Hazard Ransomware from the MedusaLocker family, temporarily disrupted operations at the Water Treatment Facility. The attack required temporary adjustments at the Water Treatment Facility, including 24/7 staffing, assistance from retired and external operators, and overtime for existing staff. The City has also incurred the following costs:
• Infrastructure Repairs and Upgrades: $105,201 for server replacements, software, licenses, and technical assistance.
• Legal and Investigative Costs: $58,550 for forensic analysis, legal guidance, and communications with threat actors.
Insurance will reimburse most costs except for a $10,000 deductible.