Columbia confirms ransomware behind city service disruptions

Columbia confirmed on Oct. 23 that a network incident discovered three days earlier was a ransomware attack. The city said some resident-facing applications were affected and that it was assessing whether information had been accessed or compromised.

The confirmation changed the city’s description of the incident. Its Oct. 21 notice referred to suspicious network activity; the Oct. 23 update identified ransomware. The city said it took affected applications offline as a precaution and was working to contain the attack and restore services.

Which services are affected? i

The city listed MyColaSC, Geographic Information Systems (GIS), Parks and Recreation reservations, and online services related to Animal Services. These are specific affected applications, not a shutdown of all city services: the city said police, fire, 911 communications, Columbia Water and the Payment Center, including online payment services, remained operational.

Residents who would normally use MyColaSC to submit a request can call 803-545-3300 instead. Emergencies should be reported by calling 911. The city said departments that rely on affected network applications had put alternative processes in place to maintain service delivery.

What is known about the data review? i

The city said sensitive data was within its network, but it has not established whether information was accessed or compromised. Its assessment of potential information compromise was ongoing as of the Oct. 23 update. That distinction matters: confirmation of ransomware does not, by itself, confirm that data was stolen or exposed.

The city contacted the South Carolina Law Enforcement Division, which is investigating, and said it was working with the agency and cybersecurity specialists to contain the attack, assess possible information compromise and restore affected services. WIS reported on Oct. 23 that no restoration timeline had been provided. The city said it would share further updates as information was confirmed.