Supply chain
β Supply Chain
City of Kirkland, Monroe, Redmonde, Seattle, Lakewood Water District, Third-Party Breach (February 2021)
Primary Source βIncident Details
US cities disclose data breaches after vendor’s ransomware attack. A ransomware attack against the widely used payment processor ATFS has sparked data breach notifications from numerous cities and agencies within California and Washington. Automatic Funds Transfer Services (AFTS) is used by many cities and agencies in Washington and other US states as a payment processor and address verification service. As the data is used for billing and verifying customers and residents is wide and varied, this attack could have a massive and widespread impact. The attack occurred around February 3rd when a cybercrime gang known as ‘Cuba ransomware’ stole unencrypted files and deployed the ransomware. Third-party company: AFTS.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- AFTS
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2021-02-01 Breach occurred
- 2021-02-18 Publicly disclosed