Ransomware hackers leak second batch of city data from Oakland attack<p>The perpetrators of the <a data-i13n="cpos:1;pos:1" href="
https://www.engadget.com/oakland-declares-state-of-emergency-ransomware-attack-092310131.html">ransomware attack against Oakland[/url] have leaked more of the data from the hack. The city has <a data-i13n="cpos:2;pos:1" href="
https://www.oaklandca.gov/news/2023/city-of-oakland-targeted-by-ransomware-attack-core-services-not-affected">confirmed[/url] that Play, the hacker group claiming responsibility for the ransomware, has shared a second batch of info on the dark web. While officials aren't sharing more details,
The Oaklandside<a data-i13n="cpos:3;pos:1" href="
https://oaklandside.org/2023/04/05/ransomware-attack-hackers-oakland-second-data-leak-confidential-city-files/">sources[/url] say the dump was 600GB and included confidential Oakland Police Department files (including disciplinary records), council members' communications and city staff's medical records.</p><p>The first release from early March was a comparatively modest 10GB, but included city employee rosters and police records. The incident was serious enough that the Oakland police union is now <a data-i13n="cpos:4;pos:1" href="
https://www.sfchronicle.com/eastbay/article/oakland-police-union-files-claim-city-data-release-17876120.php">demanding[/url] $25,000 per officer for the damage done through the leak. The union also wants to pressure the city into tightening its security.</p><span id="end-legacy-contents"></span><p>The February attack prompted the city to declare a state of emergency and take its network offline in a bid to limit the damage. That left many non-emergency services unavailable, including the systems to issue licenses and permits. Oakland closed some buildings and warned of delayed responses to non-urgent complaints. Access to some systems came back in late February.</p><p>Play group has been linked to numerous attacks, including Rackspace and the Belgian city of Antwerp. The gang first emerged in June of last year, when
BleepingComputer forum users <a data-i13n="cpos:5;pos:1" href="
https://www.bleepingcomputer.com/forums/t/773651/play-ransomware-play-findom-support-topic/">reported[/url] attacks attributed to the outfit.</p><p>The city still hasn't outlined Play's demands. However, the second wave of leaks suggests Oakland isn't bowing to pressure to pay the ransom. That's not a surprising decision. While the exposed data increases the risk of fraud, the city risks encouraging more ransomware attacks if it gives in.</p>This article originally appeared on Engadget at
https://www.engadget.com/ransomware-hackers-leak-second-batch-of-city-data-from-oakland-attack-163350688.html?src=rssSource:
Ransomware hackers leak second batch of city data from Oakland attack
