Ransomware Attack Shuts Down L.A. County Courts, All Courthouses to Reopen Tuesday

The Los Angeles County Superior Court, the largest trial court in the nation, was closed on Monday as it continues to recover from a devastating ransomware attack on its computer systems. The attack, detected on Friday, has led to the closure of all 36 courthouses in the county. However, court officials have announced that all courthouses will reopen on Tuesday.

The ransomware attack, unrelated to the recent CrowdStrike software update that caused global disruptions, has severely impacted the court’s operations. The affected systems include the My Jury Duty Portal, the court’s website, and its case management systems. Despite the extensive disruption, a preliminary investigation has shown no evidence that court users’ data were compromised.

Ransomware, a type of malware that encrypts data and demands a ransom for its release, has become an increasing threat. According to the FBI, the Internet Crime Complaint Center received 2,825 reports of ransomware attacks across the United States last year, resulting in losses exceeding $59.6 million. Critical sectors such as healthcare, manufacturing, and government facilities were most affected.

Steve Cobb, chief security officer at Security Scorecard, noted that the attack likely slipped through CrowdStrike’s vetting process. “Potentially, the vetting or the sandboxing they do when they look at code, maybe somehow this file was not included in that or slipped through,” Cobb said.

The attack led to widespread operational disruptions. IT professionals and consultants have been working with law enforcement to restore the affected systems. Court officials have been cautious in releasing specific details about the attack, including how the attackers gained access, whether a ransom was paid, and what data, if any, was compromised.

This incident is not isolated; other U.S. court systems have faced similar challenges. Earlier this year, a ransomware attack in Fulton County, Georgia, disrupted court operations for months.

Experts like H. Bryan Cunningham, executive director of the UC Irvine Cybersecurity Policy and Research Institute, emphasize the preventable nature of ransomware attacks. “All you really have to do to insulate yourself from a successful ransomware attack is have a fully encrypted, frequent backup of your data where the backup is not connected to the internet when you do it,” Cunningham said.

The Los Angeles County Sheriff’s Department confirmed that no inmates were transported to court on Monday due to the closure. However, the attack did not affect the release dates of sentenced individuals. Delays in processing orders for releases from juvenile halls and transferring people to programs were anticipated.

Evictions and move-out orders were suspended for the day, and the L.A. County public defender’s office was unaffected by the attack. Public defenders continued to provide legal counsel, prioritizing the expedited release process for eligible clients. “The right to a speedy trial is a cornerstone of justice, and this remains our priority,” the public defender’s office stated.

Emergency matters, such as warrants and removal orders, were handled by the Department of Children and Family Services’ court magistrate. Child support hearings and other scheduled proceedings were postponed, with participants to be notified of new dates. Filings were not accepted on Monday due to the closure.

The ransomware attack on L.A. County Superior Court underscores the vulnerabilities in our increasingly digital world and the critical need for robust cybersecurity measures. As operations resume, the focus will be on addressing the backlog and ensuring such disruptions are prevented in the future.