Kansas Supreme Court Issues Update On Cyber Incident – Cybercriminals Stole Data And Have Threatened To Post It To Dark Web

November 21, 2023 – The Supreme Court of Kansas has issued a statement on the October 12 security incident that has disrupted access to information systems used by Kansas courts. The security incident, which is now being called an attack, “has temporarily incapacitated Kansas Office of Judicial Administration information systems, affecting daily operations of the state’s appellate courts and district courts in 104 counties.” Additional information on the attack and how it is being handled is available here. According to Kansas Supreme Court’s statement, cybercriminals have stolen data and threatened to post it to a dark web site if their demands are not met. The Court believes the stolen data “includes Office of Judicial Administration files, district court case records on appeal, and other data, some of which may be confidential under law,” but an ongoing review is being conducted to determine the full scope of data that may have been taken. The full statement of the Kansas Supreme Court is below:

“A few weeks ago, the Kansas judicial branch was a victim of a sophisticated foreign cyberattack that impacted the information systems used by the Kansas judicial branch. This attack has temporarily incapacitated Kansas Office of Judicial Administration information systems, affecting daily operations of the state’s appellate courts and district courts in 104 counties.

“When we discovered the attack, we quickly disconnected our information systems from external access. We notified state authorities, and since that time have benefited from the continued support provided by the governor’s office, legislative leadership, and state and federal law enforcement. This attack—on one of our three branches of government—was made against all Kansans.

“While the impact on our information systems is temporary, the cybercriminals also stole data and threatened to post it to a dark web site if their demands were not met. We are working with cybersecurity experts to identify the data quickly and securely so we can conduct a comprehensive review to determine the full scope of what personal information the cybercriminals may have stolen. Based on our preliminary review, it appears the stolen information includes Office of Judicial Administration files, district court case records on appeal, and other data, some of which may be confidential under law. A full review of what may have been stolen is a high priority to us but it will take time. Once this review is complete, we will notify those affected. As we respond to this criminal attack, we will continue to update our incident response page.

“Cyberattacks on government entities are rampant. According to the 2022 FBI IC3 Internet Crime report, government is the third most-targeted sector for such attacks. Cybercrime is a persistent and serious threat to our democratic institutions. With the help of cybersecurity experts, we are buttressing our systems to guard against future attacks. It will likely take several weeks to return safely to normal operations, including electronic filing, but we will do so.

“This assault on the Kansas system of justice is evil and criminal. Today, we express our deep sorrow that Kansans will suffer at the hands of these cybercriminals.

“Throughout this incident, our decisions have been guided by our foundational values. Chief among those is our dedication to upholding and abiding by the rule of law. By adhering to those values at this profoundly trying time, we seek to demonstrate that no malicious element is more powerful than the rule of law and the institutions that abide by it.”

**********