Atlanta government ransomware attack

The city of <a href="/facts/Atlanta/8hPVGb78">Atlanta</a>, <a href="/facts/Georgia_(US_State)/KKnTDY6F">Georgia</a> was the subject of a <a href="/facts/Ransomware/muT4jcxj">ransomware</a> attack which began in March 2018. The city recognized the attack on Thursday, March 22, 2018, and publicly acknowledged it was a <a href="/facts/Ransomware/muT4jcxj">ransomware</a> attack.
Due to Atlanta's national importance as a transportation and economic hub, the attack received wide attention and was notable for both the extent and duration of the service outages caused. Many city services and programs were affected by the attack, including utility, parking, and court services. City officials were forced to complete paper forms by hand.
On November 26, a <a href="/facts/Grand_jury/DSqqYg2v">grand jury</a> indicted two <a href="/facts/Iran/24yukge8">Iranian</a> hackers, Faramarz Shahi Savandi and Mohammad Mehdi Shah Mansouri, for the attack. The <a href="/facts/United_States_Department_of_Justice/2SuTuevo">Department of Justice</a> alleged that Savandi and Mansouri are part of the <a href="/facts/Ransomware/muT4jcxj">SamSam</a> group; that the SamSam group is based out of Iran; and that the pair created SamSam Ransomware, the malware used in the attack. There are no affiliations with the government of Iran.

Atlanta government ransomware attack open-in-new

Atlanta government ransomware attack