RansomHub claims responsibility for cyber attack on Jefferson County, KY clerk’s office

Ransomware gang RansomHub yesterday claimed responsibility for a nearly four-day-long outage at the Jefferson County clerk’s office in Kentucky.

The clerk’s office closed its offices on July 22, 2024 due to a ransomware attack and didn’t fully reopen until July 29. The county posted a photo of the ransom note, which instructed the clerk’s office to pay a ransom and to not attempt to recover computer systems using third-party specialists.

The clerk’s office has not verified that RansomHub was the attacker, but no other group has claimed the attack as of time of writing. The clerk’s office said it did not contact the attackers. We do not know how much ransom was demanded.

Jefferson County officials at the time said no data was breached or compromised, but RansomHub claims to have stolen information on elections, motor vehicle services, property records, and contact details, among other data.

Comparitech contacted the Jefferson County clerk’s office for comment and will update this article if it responds.

Who is RansomHub?

RansomHub profits from a ransomware-as-a-service model and has recently been linked to the now-defunct ransomware group, Knight. RansomHub has grown in notoriety in recent months, being behind some of the biggest ransomware attacks this year so far. These include attacks on UK-based NRS Healthcare, auction house Christie’s, Frontier Communications, and Rite Aid.

Comparitech researchers have logged 25 confirmed ransomware attacks claimed by RansomHub so far in 2024, affecting over 3 million records. We recorded another 140 unconfirmed attacks claimed by RansomHub so far this year.

Ransomware attacks on US government

Comparitech tracked 57 confirmed ransomware attacks on US government agencies so far in 2024. RansomHub claimed four of those, including Robeson County Sheriff’s office, the Florida Department of Health, and the city of Newcastle.

In 2023, we logged 78 such attacks, and 2024 looks set to surpass that.

We recorded another 140 unconfirmed ransomware attacks on US government so far this year.

About the Jefferson County, KY clerk’s office

The Jefferson County clerk’s office consists of eight locations throughout the county. Jefferson County covers Louisville and the surrounding area, with a population of 783,000 people. Republican Bobbie Holsclaw is currently serving her seventh term as county clerk.

County clerks are responsible for things like marriage licenses, passport applications, property deeds, and administering elections.