‘This is a wake up call' Cyber security expert weighs in on City of Abilene cyber attack
ABILENE, Texas ()- On Friday, April 18th, 2025, The City of Abilene became aware of a cyber attack on city computer systems. Now, more than a month later, the investigation into that attack is ongoing, and an alleged deadline has come and gone the city stating no intention to pay any would-be ransom for the stolen data. KTAB/KRBC sat down with Cybersecurity expert and CEO of CyberCatch, Sai Huda, for insight into how attacks like this one have played out in the past and what might lie in the city's future.
'This is a wakeup call for the City of Abilene,' Huda said.
Despite today's deadline, City of Abilene says they still won't pay ransom in cyberattack
The City has been relatively quiet on the matter as investigation has been conducted but that's not without reason. Because this attack involves data theft and security measures, city staff is exercising an abundance of caution to mitigate the extent of the attack within city systems and prevent the investigation from becoming compromised. With that in mind, lets discuss what we know so far.
What is a Ransomware attack?
How has the City responded?
What is at risk?
What can we do now?
This kind of malicious software is something that Huda is quite familiar with, telling KTAB/KRBC that it is not uncommon for an entity such as the City of Abilene to be targeted by such an attack.
'Very typical these days where the attackers, the bad actors, install the ransomware into the system, shut down file systems. But while they do that, they also are able to make a copy of valuable data and exfiltrate that. In other words, transmit that out, and then they'll use that to threaten the victim. In this case, the city of Abilene and say, hey, pay this ransom by this deadline. Otherwise, we will not only leave you encrypted and so you won't be able to access any file systems, but also will start to sell that data on the dark web or release it publicly in increments to embarrass you. And it's all about really money at this point,' said Huda.
Cyber Security watchdog group, Comparitech published a research article into the Abilene Cyber attack in which they were able to identify the Russian-based ransomware group Qilin as having claimed responsibility for the attack.
City of Abilene doesn't dispute report of cyber attack ransom from Russian ransomware gang
In that same article, Comparitech states that Qilin mainly targets victims through phishing emails to gain access to computer systems and introduce the malicious software. The group claiming responsibility for 25 confirmed ransomware attacks in 2025 to date. Seven of which were against government entities all across the U.S.
An initial news release put out by the City of Abilene states that, 'upon receiving reports of unresponsive servers City staff began immediately executing the incident response plan in place. Affected servers and critical assets were disconnected from the network to mitigate further spread of the attack. And an investigation with 'industry-leading cybersecurity experts' was launched.
Cyber incident disrupts City of Abilene's network systems, including phones
Since that day the City IT department has been working to restore affected city services and minimize downtime. Some systems were taken offline intentionally out of an abundance of caution, again to mitigate spread.
While the city has neither confirmed nor disproven the claims of an alleged ransom placed on the data and deadline of May 27th, 2025 to pay that ransom. A statement was put out by the City of Abilene saying, 'the City of Abilene administration reiterates that it has decided no ransom will be paid related to the cyber incident that began on April 18, 2025. The city administration has collaborated closely with cybersecurity experts and legal counsel to reach this determination.'
Huda says that he feels this was the right decision for the city to make as he has seen similar situations play out to undesirable outcomes when the ransom is paid.
'I think the city is doing the right thing which is not to pay the ransom because then that's sort of paying for bad behavior. you're rewarding for bad behavior,' Huda going on to say, 'some of the victims, which include cities, have paid the ransom simply because they've done a cost benefit analysis and said, you know what? It's gonna cost us this much money and time to recover when the impact is so severe. So let's just pay the ransom, get the decryption keys, unlock the files, and, you know, we're going to have to have a good faith that these guys will not sell that data. They'll destroy it. So some of them, unfortunately have paid. But, we're seeing a trend now which is positive that they're not paying the ransom.'
Huda stating that even if the city decided to pay the ransom there is no guarantee that the stolen data would have been released.
'And a lot of times the ransomware gangs actually will go away. All of a sudden they're gone they've taken the ransom payment. They haven't provided the decryption keys and they certainly haven't destroyed the data. So, you know, they're really not trustworthy to begin with. And so why reward them?' Huda said.
With an entity like the City of Abilene that has connections to businesses, non-profits, and direct interaction with individuals, the data that was targeted could span a wide range of fields as Huda explained.
'In this case City of Abilene's customers. They could be businesses they could be individuals and as much information about them as possible,' said Huda.
In his professional opinion, Abilene may have become a more high priority target for cyber attacks due to recent increased notoriety through the announcement of the A.I Project Stargate.
'The City of Abilene has now appeared, if you will, big time on the map. The project Stargate, which is the largest investment in A.I in US history, which entails building this massive data center at City of Abilene, is really of importance to these bad actors. But imagine all the people that are already involved in that project. So the construction people, the different suppliers, there are high value targets for these bad actors because maybe they can be ransomed or maybe their data could be used to infiltrate other valuable information about the data center. And when it comes online, that becomes even more valuable,' Huda said.
While there is currently no evidence to believe that Stargate and the Lancium clean compute facility played a factor in the ransomware gang's decision to target Abilene, Huda says the sheer amount of data and information that are involved in the venture are no doubt of high value to bad actors.
'So plans, designs, how those chips are being made, where they're being shipped to. What volume of chips are being made, what types? That's a really strategic importance. And so, you know, these these that actors in this case might be a criminal gang, but, you know, they may be supported by adversary nation states such as Russia,' suggested Huda.
As the City continues to investigate and address the attack that has already happened, Huda says businesses and individuals should be taking a cybersecurity inventory to defend against potential future attacks, data loss, and identity theft.
'So first of all, businesses should be proactive right now and think that they possibly could be attack, target and therefore put some measures in place. So like an incident response plan, which is basically a plan that says, hey, can we recognize a potential incident happening? And if we do, can we quickly come together and prevent that ransomware, for example, from infecting all of our computers?…Backup files should be regularly backed up. They should be offsite, offline, inaccessible to the ransomware, because frequently the ransomware will actually be programed to hunt for those backup files,' Huda said.
Huda advised individuals who may have been impacted by the attack to check their passwords and consider changing any passwords that are linked to City of Abilene accounts. Stating also that passwords should be varied between different accounts and not be made simple or easy to guess.
As far as any potential fallout from this attack for Abilene citizens, Huda says to be on guard for identity theft and keep a close monitor on all financial or banking accounts you utilize.
'Individuals should, number one be paying attention to their credit reports. Put a credit monitoring alert on. Maybe put some credit freezes but be especially on guard for potential identity theft. That could happen not necessarily from this gang, but, you know, other gangs, other criminals that they may sell that data to who may perpetrate that type of fraud, which is identity theft. Open up credit cards, open up bank loans, different types of other expenses, you know, using the identity of the consumer. So that's the risk to the consumer,' said Huda.
Prior to this report, KTAB/KRBC reached out to the City of Abilene with a list of questions. City staff stated that they are actively working to gather the relevant information, but were unable to respond in time for this report.
Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Hill
an hour ago
- The Hill
Ex-ambassador to Russia: Putin, Xi will celebrate Trump's ‘preemptive war' in Iran
Former U.S. Ambassador to Russia Michael McFaul warned on Saturday of how U.S. strikes on Iran could influence U.S. adversaries around the world. In an interview on MSNBC, McFaul said Russian President Vladimir Putin and Chinese President Xi Jinping would be glad to see the U.S. engaging in 'preemptive' strikes. 'I think we've really got to understand our other interests in the world that might be affected by this attack today. This is a preemptive war. The world does not support preemptive wars. We learned that in 2003,' McFaul said, referring to the U.S. invasion of Iraq, which was launched based on the theory that Saddam Hussein's regime had weapons of mass destruction and threatened America. 'Putin will be celebrating this because he did his own preemptive war in Ukraine and now it's like, well, this is just what great powers do. Maybe Xi Jinping is going to think the same. He's going to say, 'Well, if they can do it here, we can do it in Taiwan,'' McFaul added. Trump announced on Saturday evening that the U.S. had bombed three Iranian nuclear sites and said, 'NOW IS THE TIME FOR PEACE!' McFaul, in the interview, said he wishes the president 'well' in his aim to bring about peace, saying that outcome is possible but not likely. 'I hope he can bring about an agreement as soon as possible. It's happened before — capitulation after an attack like this — so it could happen, but it's not what I'm predicting,' McFaul said. 'The idea that they will now sit down and negotiate with us some long-term deal in the immediate run, I think, is highly unlikely,' he added. McFaul said it's 'good news' that the U.S. strikes, according to Trump, 'totally obliterated' the Iranian nuclear facilities, saying, 'I applaud that.' 'That's good news for today, but we need to think about what are the first, second, third and fourth order consequences after this,' McFaul added. 'Most immediately, they are going to retaliate, and I hope we are prepared to prevent that and prevail against our forces in the region.'
American Military News
an hour ago
- American Military News
Zelenskyy says Russia 'chooses to kill' as Putin repeats hard-line demands
This article was originally published by Radio Free Europe/Radio Liberty and is reprinted with permission. Ukrainian President Volodymyr Zelenskyy said that a massive Russian drone and missile attack on Kyiv, which claimed dozens of civilian lives, is a reminder that Russia is disregarding cease-fire efforts and 'chooses to kill.' 'This strike is a reminder to the world that Russia spurns a cease-fire and chooses to kill,' Zelenskyy said on June 19 while visiting the site of a nine-story building that collapsed as a result of what Ukraine said was a direct missile hit during the intense aerial assault two nights earlier. 'This vile attack, carried out in the middle of the night, claimed the lives of 23 civilians,' he said on X. Five people were killed in other parts of the capital and more than 150 people in Kyiv and elsewhere were wounded in the massive attack early on June 17, emergency services said. At least two people were killed in the Black Sea port city of Odesa. 'I am grateful to all our partners who understand that Ukraine must grow stronger every single day. I thank everyone who is ready to exert pressure on Moscow in a way that makes them feel the true cost of this war,' Zelenskyy added. Zelenskyy's statement came after Russian President Vladimir Putin claimed he is ready 'to find a solution' to his war on Ukraine and to potentially meet with the Ukrainian president. However, in his remarks at a meeting with representatives of international news agencies on the sidelines of an economic forum in St. Petersburg on June 18, Putin again repeated some of his maximalist positions in comments to foreign media, giving no sign that he is prepared to make substantial concessions. 'We need to find a solution that would not only put an end to the current conflict but also create conditions that would prevent similar situations from recurring in the long term,' Putin said. The remark echoed his repeated statements that any peace deal must address what he calls the 'root causes' of the war — wording he uses to question Ukraine's right to exist, to choose its security partners, and to maintain a strong military. Russian and Ukrainian officials met in Istanbul on May 16 and June 2, the first direct peace talks since the initial weeks of Russia's full-scale invasion of Ukraine, which Putin launched on February 24, 2022. The negotiations yielded agreements on prisoner swaps and the exchange of bodies of soldiers killed in the war, but produced no progress toward a cease-fire, let alone a peace deal. Russia and Ukraine sent an unspecified number of sick or wounded prisoners home on June 19, the latest in a series of exchanges. Zelenskyy said the exchange brought back Ukrainian soldiers who had fought all along the front lines, including in the Kyiv and Chernihiv regions that were liberated by Ukrainian forces months into the Russian invasion in 2022. 'Most of them had been held captive since 2022… Our goal is to free every single one of them,' Zelenskyy added. Putin said talks could resume at some point after June 22, a date he has previously suggested for a major new swap of prisoners and the bodies of the dead. The Russian leader added, however, that he would only meet Zelenskyy in the 'final phase' of any peace negotiations. Zelenskyy has sought to meet with Putin amid the talks, but the Kremlin says an agreement on a deal must be reached first and Putin repeated his groundless claim that Zelenskyy is not a legitimate leader. 'I am ready to meet with everyone, including Zelenskyy. That is not the issue — if the Ukrainian state trusts someone in particular to conduct negotiations, for God's sake, it can be Zelenskyy,' Putin said. 'I am even ready to meet him — but only if it is some kind of final phase.' The West has slapped sanctions on Russia while NATO has beefed up its forces on its eastern flank since Putin launched the full-scale invasion of Ukraine. Rights groups have alleged major rights violations and war crimes committed by Russian forces during their military operations. Western allies have also widely criticized Putin for his refusal to agree to cease-fire terms put forward by US President Donald Trump. On June 19, Ukrainian Foreign Minister Andriy Sybiha noted that 100 days have passed since Kyiv accepted Trump's proposal for an unconditional, extendable 30-day cease-fire. Russia has kept up and in some cases intensified its bombardments of Ukrainian cities in recent weeks and is pushing to make further gains at several parts of the long front line, which runs from northeastern Ukraine to the Black Sea shore in the south. Putin's wide-ranging briefing took place as Russian air attacks continued on June 19, with the Ukrainian Air Force saying it shot down or otherwise neutralized 88 of the 104 drones fired by Russia. One person was killed in an artillery barrage on Kostyantynivka, a Ukrainian-held city in the Donetsk region, the head of the city military administration, Serhiy Horbunov, said on Facebook. Five people were wounded in Russian artillery and drone strikes on the Dnipropetrovsk region, authorities said. The Russian Defense Ministry said its forces downed 85 Ukrainian drones over 11 Russian regions and Russian-occupied Crimea. In another sign that he is not ready to make concessions, Putin vowed that Moscow will 'demilitarize' Ukraine through diplomacy or force. At the talks in 2022 and in the recent negotiations, Russia has pushed for radically reducing the size of Ukraine's military, which Kyiv and its backers say would leave it defenseless. 'We will not allow Ukraine to have armed forces that would threaten the Russian Federation and its people,' he said. 'And if we fail to reach a settlement, we will achieve our goals by military means.' Asked about civilian deaths in Russian attacks on Ukraine, Putin repeated Moscow's claim that it does not target civilians, despite ample evidence to the contrary. 'The strikes were carried out against military industries, not residential quarters,' Putin said. The confirmed civilian death toll in Ukraine since the start of Russia's full-scale invasion is over 13,000, according to the UN, which says many of the growing number of civilian casualties have been caused by Russian long-range missile and drone attacks. Officials say the real civilian toll is like higher. Meanwhile, on June 19, Zelenskyy appointed Hennadiy Shapovalov as commander of Ukraine's land force, replacing Major General Mykhaylo Drapatiy, who resigned following a deadly Russian strike on a troop training area.
Hamilton Spectator
an hour ago
- Hamilton Spectator
Undocumented students push for right to education, but Alberta noncommittal
EDMONTON - Ariana Zapata's favourite subject in school is social studies. For the 13-year-old in Edmonton, this means lessons on historical societies, colonialism, how worldviews are developed and so on. The eighth grader's own worldview is still being built, but she has pillars in place: family, fight for what you believe in, don't be too trusting and, critically, education is a right. That's why, when Zapata gets home from school every day, she passes on what she learned to her three younger siblings. 'That way when they go back to school, they won't feel behind,' she said in a recent interview. School bells haven't applied to her brother and sisters in two years. They were kicked out of school when officials realized they were undocumented. Zapata is undocumented, too, but said her school hasn't figured that out yet. Alberta isn't unique in denying children without legal residency status from attending public school. Ontario is the only Canadian province or territory that legally requires schools to enrol undocumented children. Zapata and her family, along with a coalition of non-profit advocacy groups, want Alberta to follow in Ontario's footsteps. Samantha Vaux, a social worker with an Edmonton-based group that works with undocumented families, said that by not doing so, Alberta is not fulfilling commitments made by signing the United Nations Convention of the Child in 1999. Originally ratified in 1990, the convention states signatories 'shall' make 'primary education compulsory and available free to all.' 'It's not a privilege, it's a right,' said Vaux, with the Islamic Family and Social Services Association. 'The more those children are kept out of school, the more harmful it is not only to them, (but) to their family, the community, even our society.' There's no dependable estimate for how many undocumented people live in Canada. A briefing note prepared for former federal immigration minister Marc Miller last year said there could be as many as 500,000. Zapata's family came to Canada from Mexico a few years ago and applied for refugee status. All four Zapata children attended school for two years while the family's application was being processed. But when it was denied, so too was their right to attend publicly funded schools. The family decided it wasn't safe to return to Mexico and has stayed in Canada without documentation. Zapata said she feels the need to watch her back on the way to school, given the precariousness of her situation. Dayana Rodriguez knows that feeling, too. Rodriguez, 18, and her family came to Edmonton from Mexico in 2019 and applied for refugee status. Like the Zapatas, Rodriguez and her family were denied, but decided to stay. She attended school until 2022, but stopped after losing her residency status. 'We didn't even get out of the house,' she said of her time out of school. 'You are in your house, four walls. We couldn't even go to the park comfortably. 'It was like being in a jail.' When the Rodriguez family applied again, she returned to school, though she has recently dropped out to start working and support the family, including her two younger siblings. Rodriguez's five-year-old sister was born in Canada, so she might not face enrolment issues when the next school year comes around — but her teen brother might. 'They were also asking for his papers,' Rodriguez said. 'We had to talk to the school and they kind of let him (stay) for a little, but we don't know what's going to happen.' Vaux, who works with an undocumented family from Pakistan with four school-aged kids — all of whom can't enrol — said education is just one aspect of life that's barred to undocumented people in Canada. Public health care isn't an option, nor are jobs protected by labour laws. In May, after Vaux and other advocacy groups spoke at months of meetings, Edmonton Public School trustees voted to ask the province to change the laws to allow undocumented kids to go to school. Education Minister Demetrios Nicolaides hasn't directly answered questions about whether he'd considered making legislative changes, saying only that Alberta strives to 'strike a balance between responsibility to taxpayers and compassion for those arriving to the province.' Since the school board vote, his office denied multiple interview requests over a two-week period. It also didn't answer questions about whether Nicolaides agreed that Alberta isn't living up to its commitment to compulsory education. 'It's important to note that most foreign children are eligible for a funded education in the province,' Nicolaides said in a statement. Vaux said the lack of a clear answer was 'unacceptable.' 'It's literally red tape,' she said. 'Why are children's education stopped because of that?' She said children didn't make the decision to live without documentation, but are being punished as if they did. 'Children shouldn't have to suffer or deal with these adult issues,' Vaux said. 'They didn't ask to be put in those situations.' This report by The Canadian Press was first published June 22, 2025. Error! Sorry, there was an error processing your request. There was a problem with the recaptcha. Please try again. You may unsubscribe at any time. By signing up, you agree to our terms of use and privacy policy . This site is protected by reCAPTCHA and the Google privacy policy and terms of service apply. Want more of the latest from us? Sign up for more at our newsletter page .
