Today, we’re addressing a major cybersecurity incident that has disrupted the operations of the Los Angeles County Superior Court, the largest trial court in the nation. A ransomware attack, detected last Friday, forced the closure of all 36 courthouses in the county, causing significant delays and operational challenges.
The attack did not appear to be connected to the recent global issues caused by a CrowdStrike software update that impacted various entities worldwide. Court officials are working tirelessly to restore their systems, and they have announced that all courthouses will reopen on Tuesday. However, court users should expect delays and potential impacts due to limited functionality.
The affected systems include the My Jury Duty Portal, the court’s website, and its case management systems. Fortunately, a preliminary investigation has shown no evidence that court users’ data were compromised.
Ransomware, a type of malware that encrypts data and demands a ransom for its release, has been increasingly affecting various sectors. Last year alone, ransomware attacks led to over $59.6 million in reported losses across the United States, targeting healthcare, public health, critical manufacturing, and government facilities.
Typically, ransomware spreads through malicious links in emails or compromised websites. Sometimes, hackers exploit unpatched vulnerabilities in systems to gain access. According to H. Bryan Cunningham, executive director of the UC Irvine Cybersecurity Policy and Research Institute, the most effective way to prevent such attacks is to maintain frequent, fully encrypted backups that are not connected to the internet during the backup process.
A team of consultants, vendors, and law enforcement officials is working to get the court systems back online. However, as of Sunday, some systems remained inaccessible. Court officials have declined to comment on specific details about the attack, such as how the attackers gained control or whether a ransom was paid.
The Los Angeles County Sheriff’s Department announced that no inmates would be transported to court on Monday due to the closure. However, the disruption did not affect the scheduled release dates for individuals. Evictions and move-out orders were suspended for the day, and there were delays in releasing juveniles from detention and transferring people to programs.
The attack also impacted various court-related services, including child support hearings, filings, conservatorship proceedings, and CARE Court services for the Department of Mental Health. Emergency matters, such as warrants and removal orders, were handled by the Department of Children and Family Services’ court magistrate.
While the Los Angeles County public defender’s office was not directly affected by the attack, it is working closely with the Superior Court to protect clients’ rights. The office emphasized its commitment to ensuring the right to a speedy trial and is monitoring the situation to address any impact on court schedules. They are also prioritizing the expedited release process for eligible clients.
