Cost of ransomware attack on Baltimore County public schools climbs to $7.7M
Cost of ransomware attack on Baltimore County public schools climbs to $7.7M
By LILLIAN REED
BALTIMORE SUN |
JUN 11, 2021 AT 6:00 AM
Baltimore County school officials estimate the ransomware attack in November will cost the system at least $7.7 million, nearing what Baltimore City spent following a similar attack in 2019.
The estimated costs cover a wide range of programs, services, trainings and licenses that helped Maryland’s third-largest school system respond to and recover from the attack, which took place the day before Thanksgiving and canceled two days of online classes for 111,000 students.
Advertisement
00:01
11:05
The district has said no personal information was stolen but has not disclosed the extent of the attack nor any ransom demands.
Among the largest expenditures was more than $2 million to move computer applications to a cloud-based system and more than $1.4 million for a one-year license on Windows security software, the latter of which was purchased at the strong recommendation of the system’s cyber insurance carrier.
PAID POSTWhat Is This?
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
SEE MORE
Sponsored Content by TruthAboutVision.com
During a county school board meeting Tuesday, George Sarris, the school system’s executive director for fiscal services, projected the final price tag could top more than $8 million. Sarris was not available for comment this week.
[Most read] Most Marylanders on unemployment are on federal programs. Those end next week. »
The school board previously approved four contracts representing $1.7 million in services related to the ransomware attack.
The Evening Sun Newsletter
Daily
Get your evening news in your e-mail inbox. Get all the top news and sports from the baltimoresun.com.
ENTER YOUR EMAIL ADDRESS
Advertisement
Skip in 5s
The updated figure places the county much closer to what Baltimore City spent on recovery from its own ransomware attack in 2019. The city spent about $10 million on recovery efforts, not including $8.2 million in lost revenues such as taxes, fees and fines.
Unlike the city, the Baltimore County school system was paying for cyber insurance at the time of the attack. The system’s policy covers up to $2 million for direct costs caused by the ransomware attack and $3 million for liability costs.
Some of the remaining bills can be paid out of the system’s current budget and federal CARES Act funding, Sarris said during a school board budget committee meeting in April.
Still, the attack has delayed at least one major project school staff were working on this year.
Staff and contractors were on track to complete a payroll project that would allow employees to receive their paychecks over the course of a full calendar year instead of the typical 10-month school year. Administrators asked the school board Tuesday for permission to set a new target for rollout during the 2022-23 academic year.
Another major system lost in the attack was the timekeeping program that allows the district to track employee hours and overtime. Officials estimate it will cost $800,000 to restore the system.
By LILLIAN REED
BALTIMORE SUN |
JUN 11, 2021 AT 6:00 AM
Baltimore County school officials estimate the ransomware attack in November will cost the system at least $7.7 million, nearing what Baltimore City spent following a similar attack in 2019.
The estimated costs cover a wide range of programs, services, trainings and licenses that helped Maryland’s third-largest school system respond to and recover from the attack, which took place the day before Thanksgiving and canceled two days of online classes for 111,000 students.
Advertisement
00:01
11:05
The district has said no personal information was stolen but has not disclosed the extent of the attack nor any ransom demands.
Among the largest expenditures was more than $2 million to move computer applications to a cloud-based system and more than $1.4 million for a one-year license on Windows security software, the latter of which was purchased at the strong recommendation of the system’s cyber insurance carrier.
PAID POSTWhat Is This?
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
1 Odd Trick Restores Your Eyes To Perfect 20/20 Vision
SEE MORE
Sponsored Content by TruthAboutVision.com
During a county school board meeting Tuesday, George Sarris, the school system’s executive director for fiscal services, projected the final price tag could top more than $8 million. Sarris was not available for comment this week.
[Most read] Most Marylanders on unemployment are on federal programs. Those end next week. »
The school board previously approved four contracts representing $1.7 million in services related to the ransomware attack.
The Evening Sun Newsletter
Daily
Get your evening news in your e-mail inbox. Get all the top news and sports from the baltimoresun.com.
ENTER YOUR EMAIL ADDRESS
Advertisement
Skip in 5s
The updated figure places the county much closer to what Baltimore City spent on recovery from its own ransomware attack in 2019. The city spent about $10 million on recovery efforts, not including $8.2 million in lost revenues such as taxes, fees and fines.
Unlike the city, the Baltimore County school system was paying for cyber insurance at the time of the attack. The system’s policy covers up to $2 million for direct costs caused by the ransomware attack and $3 million for liability costs.
Some of the remaining bills can be paid out of the system’s current budget and federal CARES Act funding, Sarris said during a school board budget committee meeting in April.
Still, the attack has delayed at least one major project school staff were working on this year.
Staff and contractors were on track to complete a payroll project that would allow employees to receive their paychecks over the course of a full calendar year instead of the typical 10-month school year. Administrators asked the school board Tuesday for permission to set a new target for rollout during the 2022-23 academic year.
Another major system lost in the attack was the timekeeping program that allows the district to track employee hours and overtime. Officials estimate it will cost $800,000 to restore the system.
