The Division of Legislative Automated Systems, which provides IT services to the Virginia General Assembly (the Assembly), detected a ransomware attack on December 10, 2021, that included “extremely sophisticated malware” that affected all of its servers.

The attack comes right before the  Assembly commences its session in January.

Governor Ralph Northam was briefed on the attack and has deployed the assistance of other state agencies to respond to the attack.

Municipalities continue to be plagued with ransomware attacks, and in this instance, the timing of the attack, which is designed to cause as much disruption as possible, is typical of ransomware gangs. The attackers’ strategy is that the more disruptive the timing of the attack, the higher the likelihood that the ransom will be paid.

As we get closer to the holidays and the end of the year, it appears that attacks are happening more frequently and with higher impact.