Narragansett Bay Commission

In July 2022, the Narragansett Bay Commission (NBC), which operates sewer systems in parts of the metropolitan Providence and Blackstone Valley areas in Rhode Island, experienced a significant cybersecurity breach. This incident was a ransomware attack, where hackers encrypted data on certain computers and systems within the NBC’s network. Despite the attack, there was no disruption to wastewater collection and treatment services, ensuring that the sewage treatment processes continued to function without interruption[1][3].

The commission responded to the cyberattack by paying a quarter-million-dollar ransom to the attackers to regain access to the encrypted data. After the payment, the NBC was able to bring its systems back online within a matter of hours[1]. It was unclear whether customer data was compromised during the attack. However, the commission stated that if it was determined that anyone’s personal information was potentially subject to unauthorized access or acquisition in connection with this incident, they would promptly provide notice to those individuals in accordance with applicable law. Notably, the NBC does not store payment information or Social Security numbers for any of its customers on its systems[3].

In response to the attack, the Narragansett Bay Commission immediately initiated its incident response plan, contacted law enforcement, and launched an investigation. They also began working quickly to address the incident and restore operations on the systems involved. The commission is enhancing security measures on its systems and training employees concerning data security to help prevent a similar incident from occurring in the future[5].

This cyberattack underscores the ongoing threat of ransomware to critical infrastructure and organizations, highlighting the importance of robust cybersecurity measures to safeguard sensitive data and ensure the continuity of essential services[15].

Citations:

1. https://www.providencejournal.com/story/news/local/2022/07/20/ri-sewer-system-narragansett-bay-commission-paid-250-000-end-cyberattack/10107968002/
2. https://tunnelingonline.com/narragansett-bay-commission-completes-excavation-of-pawtucket-tunnel/
3. https://www.providencejournal.com/story/news/local/2022/07/16/ri-sewer-system-narragansett-bay-commission-hit-cyber-attack/10076978002/
4. https://www.wpri.com/news/local-news/blackstone-valley/narragansett-bay-commission-finishes-pawtucket-tunnel/
5. https://www.golocalprov.com/news/narragansett-bay-comm.-hit-with-cyber-attack-says-no-payment-data-compromis
6. https://turnto10.com/news/local/narragansett-bay-commission-reaches-milestone-following-completion-of-underground-tunnel-22-mile-tunnel-in-restoredwaters-ri-program-southern-new-england-feb-16-2024
7. https://www.databreaches.net/rhode-island-sewer-system-operator-hit-by-cyber-attack/
8. https://www.providencejournal.com/story/news/environment/2024/02/15/sewer-overflow-tunnel-under-pawtucket-finished-being-drilled/72616107007/
9. https://finance.yahoo.com/news/rhode-island-sewer-system-operator-232425492.html
10. https://turnto10.com/news/local/narragansett-bay-commission-completes-22-mile-tunnel-in-restoredwaters-ri-program-southern-new-england-rhode-island-february-15-2024
11. https://www.narrabay.com
12. https://www.golocalprov.com/news/Plan-to-Move-50000-Tons-of-Hazardous-Material-to-Providence-Neighborhoo
13. https://www.ri.gov/press/?agency_id=107
14. https://www.providencejournal.com/story/news/2024/01/22/wheres-the-debris-for-the-2-2-mile-tunnel-being-drilled-in-ri-going-combined-sewer-overflows-project/72231002007/
15. https://www.csidb.net/csidb/incidents/18cbfd75-f7a8-4b86-8375-16bd60911af5/
16. https://ecori.org/2021-6-22-narragansett-bay-commission-digs-into-final-phase-of-sewer-overflow-tunnel-project/