Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity Ransomware topic
No spam. Unsubscribe anytime.
DuPage County approves up to $500,000 for ongoing ransomware response; insurer to cover excess costs
Summary
County officials authorized an emergency procurement for continued investigation and recovery after a ransomware incident, with county tort liability covering the first $250,000 and cyber liability insurance expected to cover costs above that; staff estimated final costs will be known within about 90 days.
DuPage County authorized an emergency procurement of up to $500,000 to continue response and recovery work after a ransomware incident, finance staff told the board. Vice Chair Cahill moved the ratification and board members approved it by voice vote.
County staff said the county’s tort liability fund will cover the first $250,000 of expenses; cyber liability insurance is expected to cover amounts above that. ‘‘We pay all of these expenses and are reimbursed by our insurance company,’’ said Nick Katmayer, county staff and member of the health‑plan work group who spoke during the finance discussion. County staff estimated the open phase of evidence review and data mining should be concluded within about 90 days, at which point final costs will be clearer.
Board members asked for clarification of earlier expenditures. Staff said initial emergency work in May totaled roughly $54,090 and that the $500,000 authorization creates room to address additional costs if data mining or further remediation uncovers more work. Officials emphasized they have instructed outside vendors to continue discovery and remediation work while the county awaits final insurance reimbursement decisions.
The board approved the ratification and placed the procurement on the record; a member asked that staff report back with a final accounting once data mining is complete.
