Lake City isn't the first local government to pay out hundreds of thousands of dollars to hackers over ransomware, and it's not likely to be the last. The northern Florida city said Tuesday that it would be paying hackers up to $460,000 into recover its computer systems.
This comes days after Riviera Beach, a Florida city more than 300 miles away, announced that it would be paying hackers up to.
Lake City's computer systems had been down for at least two weeks, as malware seeped through the local government's network and locked down computers, holding them hostage unless officials paid the price. The city first disclosed the attack on June 10, noting that all city emails were down, as were landline phones.
The city's 65,000 residents weren't able to pay their water and electric bills online, or get building permits. Police and fire services were not affected, officials said.
"The biggest concern for the public at this moment is the lack of email communication, and we hope to have alternate email contacts available shortly," city manager Joe Helfenberger said in a statement.
Lake City's police said it was investigating the hackers behind the attack. The payment will come through the city's insurance company, which will cover the entire ransom except for $10,000, CBS 47 Action News Jax reported. (Note: CBS is the parent company of CNET.)
At least 170 US state and local governments have been hit with ransomware attacks since 2013, accorded to a Recorded Future report. There's a debate over whether ransomware victims should pay hackers, and . The Washington Post's editorial board published an op-ed on Monday recommending a federal law making it illegal to pay ransomware.
But analysts at Forrester Research suggested that paying ransomware could be considered a valid recovery option, especially as these attacks ramp up and cities have no other way of solving the issues.