Cyberattack Details
The (DEQ) was reportedly targeted by the ransomware group , which claimed to have stolen sensitive employee information and attempted to auction it.
DEQ confirmed a cyberattack on April 9, disrupting services including vehicle emissions inspections and forcing employees to work from their phones. Most servers and testing stations are now operational.
Response and Investigation
DEQ has not confirmed the theft or details about Rhysida's demands, stating the investigation is ongoing. They deny engaging in ransom discussions with any entity claiming to have stolen DEQ data.
Rhysida, known for previous high-profile attacks, released over a million files on the dark web, including DEQ employee data, claiming the files were worth 30 Bitcoins.