The Rising Threat: Physical Consequences of Cyberattacks on Urban Infrastructure

An Increasing Threat: Ransomware Attacks Targeting US Cities

Introduction

In recent years, ransomware attacks on local US governments have been on the rise. In 2022, 106 local US governments experienced such attacks, marking a significant increase from the previous year. These cyberattacks, known as hybrid attacks, start in the digital realm but eventually target physical infrastructure, posing dangerous consequences for cities and local governments. As cities become more digitally connected, the risk of cyberattacks is amplified, making it essential for officials to develop strategic plans to prepare for and respond to these threats.

The Role of Communication and Human Error

Identifying points of weakness is a crucial step in preparing for cyberattacks. For local governments, one of the most vulnerable areas lies in communication and human error. Governments have a responsibility to communicate with the public and different departments, but this also presents a prime opportunity for bad actors to infiltrate their networks. Phishing schemes, in which attackers deceive individuals into revealing sensitive information or downloading malicious software, are the primary drivers of ransomware attacks.

Public affairs offices, in particular, are vulnerable to phishing attacks. Any message sent from the government can be manipulated to facilitate phishing schemes, while information received from citizens can contain malware. Although governments can implement technological measures to block threats, human error remains a significant challenge. Even with security training, government employees are not infallible, and a single act of unintentionally introducing malware into critical infrastructure systems can grant bad actors access to sensitive information.

The Need for Preparedness

Once weaknesses have been identified, it is crucial for cities to understand the threats they face. There are two primary high-level threats that cities must address and prepare for: attacks on physical infrastructure and attempts to discredit a city’s reputation or erode public trust.

Cities rely heavily on technology and digital connections to perform essential functions, such as providing electricity and water, staffing emergency medical services, and more. Consequently, each department can be seen as a tech company susceptible to cyberattacks. A single successful attack can cripple a city’s infrastructure, affecting not just its ability to provide services but also the trust the public has in the government’s ability to operate effectively.

Furthermore, attacks on cities often aim to discredit them, impacting their reputation and potentially leading to a loss in revenue from residents and tourists. Ransomware attacks can be part of targeted campaigns to tarnish a city’s image, significantly compromising its viability.

Strategies for Preparation and Mitigation

To ensure resilience and mitigate the impact of ransomware attacks, cities should implement several key strategies:

1. Campaigns to Educate Citizens and Employees

As not all individuals are digitally proficient, governments must undertake educational campaigns to inform citizens about what genuine messages from official offices look like and how to respond if they suspect a phishing attempt. This initiative can help raise awareness and reduce the success rate of phishing attacks.

2. Public-Facing Communication Strategies

In the event of an attack, having a well-prepared communication plan is crucial. By promptly and effectively communicating the situation and the government’s response, panic can be mitigated, and the city’s reputation can be protected. This plan should establish official public offices or verified public partners as the sole sources of reliable information, ensuring the public’s trust.

3. A Centralized Chief Information Officer (CIO)

Having a Chief Information Officer (CIO) play a critical role in the response to cyber threats is vital for any organization, and the same holds true for governments. The CIO should possess comprehensive knowledge of potential threat points, established response protocols, and how different departments can collaboratively address and contain cyber threats within city systems.

4. Conduct Digital Tabletop Exercises

Tabletop exercises, simulated scenarios that allow officials to work through potential cyberattack scenarios, are indispensable for cities’ preparedness plans. These exercises should involve playing out scenarios where critical services, such as the power grid or emergency medical services, are compromised. Additionally, they should identify potential paths through which cyberattacks could impact these services, helping officials plan appropriate responses.

Conclusion

Ransomware attacks on US cities are an escalating threat. Cities must adopt the mindset that it is not a matter of “if” but “when” an attack will occur. By understanding attack vectors, recognizing potential threats and their impact, and regularly testing and updating preparedness and response plans, cities can bolster their defenses against cyberattacks. However, it is crucial to acknowledge that no system is foolproof, and while preventive measures can significantly reduce the risk, strategic preparation and response plans remain essential components in the new era of cyber threats.

Keywords: Infrastructure, Cyberattacks, Urban Infrastructure, Physical Consequences, Rising Threat