Who: City Hall of Del Rio, Texas

What was affected: Ransomware attack which led to multiple computers on the network being turned off and disconnected from the Internet to contain and analyze the malware.

When it happened: January 10, 2019

How it happened: Ransom note contained a phone number to be used to contact the attackers for instructions on how to pay the ransom. Files on the compromised machines were encrypted, but no details regarding the ransom amount were included. The name of the ransomware strain used in the attack was not yet known

Outcome: As part of their ransomware containment process, Del Rio City reported the ransomware incident to the FBI, which transferred the investigation to the U.S. Secret Service.