Supply chain β›“ Supply Chain

City of Kirkland, Monroe, Redmonde, Seattle, Lakewood Water District, Third-Party Breach (February 2021)

πŸ“… 2021-02-01 🏒 AFTS
Primary Source β†—

Incident Details

US cities disclose data breaches after vendor’s ransomware attack. A ransomware attack against the widely used payment processor ATFS has sparked data breach notifications from numerous cities and agencies within California and Washington. Automatic Funds Transfer Services (AFTS) is used by many cities and agencies in Washington and other US states as a payment processor and address verification service. As the data is used for billing and verifying customers and residents is wide and varied, this attack could have a massive and widespread impact. The attack occurred around February 3rd when a cybercrime gang known as ‘Cuba ransomware’ stole unencrypted files and deployed the ransomware. Third-party company: AFTS.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
AFTS
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-02-01 Breach occurred
  2. 2021-02-18 Publicly disclosed