Suffolk cyberattack: Special counsel says county didn't have recovery plan in place

The meeting of the Cyber Intrusion Investigation Committee comes after a forensic investigation into the September attack revealed just how much information was compromised.

News 12 Staff

May 1, 2023, 9:22 AM

Updated 605 days ago

Share:

A special Legislative committee met for the first time Monday to probe the Suffolk County cyberattack.
The meeting of the Cyber Intrusion Investigation Committee Monday comes after a forensic investigation into the September attack revealed just how much information was compromised.
The attack impacted 500,000 people, with hackers gaining access to 470,000 driver's license numbers, 26,000 Social Security numbers, and 71 county systems. Officials say they were able to gain access through the county clerk's network.
The committee has conducted nine interviews with witnesses, received 20,000 pages of documents and obtained forensic reports that are still being looked into.
"The county did not have cyber breach insurance," says Richard Donoghue, a former U.S. attorney hired as the committee's counsel. "It's also apparent the county did not have a cyber breach remediation or recovery plan in place and that likely contributed to the long recovery period. It's also apparent the county did not implement the recommendations from the 2018 cyber health checkup."
Committee members will also be looking at training, personnel and policies to see where there may have been any holes.
The next meeting will be held on May 8.