Loading...
HomeMy WebLinkAbout2024-02-06_Commissioners' Meeting No_1179_APPROVED 2289 MINUTE BOOK ftA"0F(ZF) WNERS WASHINGTON COUNTY, PENNSYLANIA IML9 LIMITED E18Q,94A1KV Minute No. 1179 February 6, 2024 The Washington County Commissioners held an emergency meeting in Public Meeting Room G-16,in the Crossroads Center at 95 West Beau Street,Washington, Pa.,with the following members in attendance: Commissioners Nick Sherman, Electra Janis and Larry Maggi. Also present were Chief of Staff Daryl Price, Solicitor Gary Sweat;Public Affairs Director,Patrick Geho; Chief Clerk Cindy Griffin and Administrative Assistant Debbie Corson. Mr. Sherman called the meeting to order at approximately 3:08 p.m. COMMISSIONERS' STATEMENT The purpose of this Emergency Meeting is to inform the public of the essential facts concerning the recent ransomware attack on the County's computer network. There have been numerous questions raised and County residents have expressed concern and fears surrounding the disruption of County services and the operations of our Court system. On January 19,2024, the County's IT Department was notified of suspicious activity on the County's computer network. However, it was not until January 24,2024, that we detected evidence of a ransomware attack on our network.We immediately began an investigation with the assistance of a nationally recognized digital forensics firm to understand what happened,to contain the attack, restore operations, and determine the nature and scope of the attack. We notified Federal and State law enforcement officials and immediately began a thorough review of the impacted data to determine what information was involved and who may have been affected, so that we could provide proper notice to those individuals. PURPOSE After notice of this incident was given to our insurance carrier, Sylint, one of the Nation's foremost recognized cyber security, forensics and e-Discovery firms, as well as Attorney Matt Meade, an Attorney with Eckert Seamans, specializing in Cyber Law,were brought in to supervise the incident.These individuals are here today to summarize the action they took to identify the attack and the steps they have taken to stabilize the County's computer network and systems. CO_NSULTANTS'UPDATES Cyber Law Consulting Attorney Matt Meade of Eckert Seamans was introduced and Jeff Birnbach of Sylint reported on incident assessments and containment steps he and his team have taken on behalf of the County. ANNOUNCEMENTS Mr. Sherman read the following from a prepared script: "The County has taken unprecedented action and worked around the clock to implement recovery plans designed to securely restore operations to the County computer network and to securely restore the operations of the Court system,as well as the various Departments of County government. Our overriding goal and concern is to protect the privacy of the residents and taxpayers of the County and to ensure that their personal information is protected and at the same time,be as transparent as we can,given the legal constraints under which we are working. With this in mind I make the following motions:" Mr. Sherman, on behalf of the Commissioners,presented to the Board for their consideration and approval, the retention of Digital Mint of Chicago, Illinois to provide digital security consulting services and to take the steps necessary to restore the County's computer network and authorize expenditures for incident response, settlement, attorneys' fees and to address implement cyber security issues within the County. To also retain Sylint,LLC of Sarasota, Florida to conduct a thorough analysis of the County's computer network and present a plan to implement a broader modernization of cyber security within the County, that would include the installation of hardware, software, etc., needed to protect and preserve critical information maintained by the County.Any and all expenditures are to be paid from the American Rescue Plan Act ('ARPA") and not 2290 MINUTE BOOK BMWIMRWIMISISUDSISRONERS WASHINGTON COUNTY, PENNSYLANIA IMR . TF4 ES 8Q8491 KM from the County's General Fund. These funds shall not exceed an amount of$400,000,without further approval by the Commissioners. Moved by Mr. Sherman, seconded by Ms.Janis, the retention of Digital Mint of Chicago, IL,and Sylint,LLC of Sarasota, FL, for funding which shall not exceed$400,000. Roll call vote taken: Mr. Maggi—No;Ms.Janis—Yes;Mr. Sherman—Yes. Motion carried. Mr. Sherman, on behalf of the Commissioners,presented to the Board for their consideration and authorization, for the County Solicitor to execute any Engagement Agreements required,with the firms identified, as well as other documentation necessary to address the ransomware attack. Moved by Mr. Sherman, seconded by Ms.Janis, authorizing the County Solicitor to execute Engagement Agreements and other documentation needed to address the ransomware attack. Roll call vote taken: Mr. Maggi—No;Ms.Janis—Yes;Mr. Sherman—Yes. Motion carried. There being no further business,Chairman Sherman declared the meeting adjourned at approximately 3:18 p.m. THE FOREGOING MINUTES WERE SUBMITTED FOR APPROVAL: , 2024 ATTEST; CHIEF CLERI"