Atlanta Ransomware Attack (A)

This case describes the March 2018 Ransomware attack on the information technology (IT) systems of the city of Atlanta and the response by Mayor Keisha Lance Bottoms and her administration. The case includes a brief background on Bottoms and her young administration at the time of the attack. The case also includes background information about the trend of ransomware attacks against organizations, including government entities such as municipalities. Several cybersecurity experts describe the tactics of ransomware attackers and potential strategies to respond when ransomware attacks occur. The (B) case concludes with a description of Bottoms and her administration’s approach to managing the crisis, including her decision to not pay the ransom and instead use Atlanta’s cyber-insurance policy award to invest in remediation and upgrading of the city’s IT systems.