Kentucky Cyber Attacks

Infrastructure Affected

Public Safety
Government
Medical
Education
 
Kentucky.jpg
 

Public Safety

No attacks logged to date.


 
BACK TO TOP

Local Government

City of Paducah, McCracken County

Breach Type - Hacking, Malware

WPSD Local 6

  • Bad actors disrupted server access during cyberattack
  • IT officials worked diligently to restore network
  • Officials believed private information remained safe
Read More
WPSD Local 6

  • Unknown bad actors hit city network
  • Third party IT firm utilized in investigation
  • City officials confirmed complete forensic investigation
Read More

 
Park DuValle Community Health Center, Jefferson County

Breach Type – Unknown Ransomware

WDRB

  • Nearly $70,000 was given to hackers in the hopes that the data of around 20,000 patients would be released back to the center
  • It has been several months without any sign of the data being restored as operations run on pen and paper
  • This was the second attack that the center has faced forcing DuValle to lose over $1 million in attempts at restoration
Read More

 
Louisville Regional Airport Authority, Jefferson County

Breach Type - Ransomware

WDRB

  • Louisville Regional Airport attacked by ransomware virus, affected numerous files
  • Attack did not otherwise impact operations or security systems
  • Malicious software was removed, and infected files restored from backup
Read More

 
Daviess County Library, Daviess County

Breach Type - Hacking, Ransomware

14 News

  • Daviess County Library attacked with ransomware
  • Attacker demanded $40,000 to retrieve compromised data
  • IT advised that they had to revert to backup systems
Read More

 
Kentucky Finance and Administration Cabinet's Department of Revenue

Breach Type - Phishing, Other

Courier-Journal

  • 12 state government email accounts compromised
  • Accounts include those of employees in the Finance and Administration Cabinet’s Department of Revenue
  • The accounts keep highly confidential personal and financial records about all Kentucky taxpayers
  • Login information affected
  • Emails may contain malicious Microsoft Office attachments
Read More

 
City of Glenview

Breach Type - Hack

Wave 3 News

  • Hackers claiming to be Islamic state hack city website
  • Built script to scan government pages for vulnerabilities
  • Hackers post threatening messages on webpage
Read More

 
BACK TO TOP

Medical

Hardin Memorial Hospital, Hardin County

Breach Type - Hacking, Malware/Other

Wave 3

  • Hardin Memorial Hospital noted that there was a possible hacking at the healthcare facility
  • The Hospital had experienced several hiccups within their IT systems overnight
  • Extra staff was called in to maintain patient care and all processes became manual
Read More
Health IT Security

  • HMH faced downtime following a cyber-attack over the weekend
  • Officials state that they were able to repair systems and restore nominal processes
  • IT systems were affected and paused as work was made to restore the servers
Read More

 
Appalachian Regional Hospital

Breach Type - Hack

The Register-Herald

  • Hackers plant virus in Appalachian Regional's electronic web-based services and communications
  • Computers shut down to prevent further spread of malware
  • All patient care handled manually
  • ARH would not disclose what information was accessed during breach
Read More

 
Kentucky State Health Insurance Website

Breach Type - Other (vulnerabilities discovered)

AP News

  • Government Accountability Office discovered vulnerabilities in 3 state health insurance websites
  • One state did not encrypt passwords
  • One state did not properly use a filter to block hostile attempts to visit the website
  • One state did not use the proper encryption on its servers
  • Spokesperson states that nobody's personal information was released or compromised
Read More

 
Methodist Hospital, Henderson

Breach Type - Ransomware

WBTV

  • FBI investigating cyber security breach
  • Hackers locked patient files and demanded ransom for data
  • Hospital remains available to its patients during the attack
  • Officials considering paying ransom to hackers as means of securing patient data
Read More

 
BACK TO TOP

Education

University of Kentucky, Fayette County

Breach Type – Unknown, Malware

Info Security

  • College healthcare provider impacted in cyberattack
  • Officials believed personal information was not leaked
  • Statement was released following system reset
Read More

 
Hopkins County Schools, Hopkins Schools

Breach Type - Hacking, Data Breach

The Messenger

  • A compromised account had exposed sensitive information of over 7,000 students
  • In order to prevent any further occurrences the school board has focused on training staff on password protection
  • The school board has needed to contact many statewide agencies such as the Kentucky State Police, and Department of Education
Read More

 
Scott County Schools, Scott County

Breach Type - Phishing, Other

WKYT

  • The FBI has begun investigating after funds from an invoice were never received
  • The school had fallen victim to a fraudulent email giving money to the hackers
  • Millions were lost from the district following the scam
Read More

 
Bardstown City School District, Nelson County

Breach Type - Phishing, Other

Nelson County Gazette

  • The schools were victim to a recent attack that almost compromised an employee their paycheck
  • Following a procedural error an employee’s money was diverted to a different bank account
  • Once the error was noticed the bank was contacted immediately and the transfer was stopped before the money was lost
Read More

 
University of Louisville, Jefferson County

Breach Type - Hacking, Data Breach

The Register-Herald

  • 250 University faculty and staff had personal data breached by hackers
  • Hackers exfiltrated data from the school’s health initiative “Get Healthy Now”
  • No financial data appears to be at risk
Read More

 

BACK TO TOP