Security News > 2024 > May > City of Wichita breach claimed by LockBit ransomware gang

The LockBit ransomware gang has claimed responsibility for a disruptive cyberattack on the City of Wichita, which has forced the City's authorities to shut down IT systems used for online bill payment, including court fines, water bills, and public transportation.
Earlier today, the LockBit ransomware group added Wichita to its extortion portal, threatening to publish all stolen files on the site by May 15, 2024, unless the City pays the ransom.
The list of a ransomware victims only three days after an attack is unusual, as ransomware gangs usually give companies more time to negotiate.
While the City is still investigating whether data was stolen in the attack, the LockBit ransomware gang is known to steal data before deploying their encryptors.
City of Wichita shuts down IT network after ransomware attack.
LockBit ransomware admin identified, sanctioned in US, UK, Australia.
News URL
Related news
- Baltimore City Public Schools data breach affects over 31,000 people (source)
- Marks & Spencer breach linked to Scattered Spider ransomware attack (source)
- Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization (source)
- LockBit ransomware gang hacked, victim negotiations exposed (source)
- 3AM ransomware uses spoofed IT calls, email bombing to breach networks (source)
- Interlock ransomware claims Kettering Health breach, leaks stolen data (source)