City of North Bend Hit with Ransomware - Attivo Networks
Attivo Networks Blogs

City of North Bend Hit with Ransomware

SC media logo

The city of North Bend, Ore., was hit with a ransomware attack which temporarily locked out city workers from their computers and databases.

“One weekend morning a few weeks back all of our servers and things locked up, and we received a ransomware note that said for $50,000 in Bitcoin these people would provide us with the code to unlock our computer systems,” North Bend City Administrator Terence O’Connor told The World.

Fortunately the city’s IT systems were backed up and officials were able to avoid the high ransom demanded by the criminals responsible for the attack.

City officials did, however, call in the FBI to investigate the attack and while they were unable to identify anyone directly involved in the attack, they were able to trace the ransom demand to Romania.

O’Connor added that the attack appeared to be a more sophisticated ransomware where there are two keys needed to unlock your system with one planted in the system and the other is held by the culprit.

The city was insured and ended up having to pay around $5,000 in out of pocket expenses as well as added a firewall security to prevent future attacks.


Share on:

Free Active Directory Assessment

Get Visibility Into Privilege And Service Account Exposure

For a limited time, Attivo Networks is providing free Active Directory Security Assessments to demonstrate how ADAssessor provides unprecedented and continuous visibility to AD vulnerabilities.

Try Our Endpoint Detection Net (EDN) for Free


Free use offer of our Award-winning security solution to prevent attackers from lateral movement, credential theft, and privilege escalation, fast and easy.

Newsletter Signup

    Yes, please opt me in to receive your quarterly newsletter, event invitations, and product updates.

    I understand that I can opt out at any time, and can refer to Attivo Networks Privacy Policy for more information.
  • This field is for validation purposes and should be left unchanged.

ADSecure 90-Day Free Trial


  • Hide and deny access to AD objects
  • Get alerted on unauthorized queries
  • Attack details easily viewable in dashboard
  • Your data remains on-premise


Leave a Comment

Your email address will not be published. Required fields are marked *

seventeen + 20 =

Ready to find out what’s lurking in your network?

Scroll to Top