From: Consumer Financial Protection Bureau, Federal Deposit Insurance Corporation, National Credit Union Administration, Office of the Comptroller of the Currency, and State Financial Regulators
Ransomware attacks continue to result in monetary and data loss, and critical service disruption, which could result in consumer and other customer harm. Financial institutions and their service providers are encouraged to strengthen defenses to prevent ransomware attacks, and to develop incident response plans to specifically address ransomware attacks if preventive measures fail. An April 20, 2022 alert from the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) titled “Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure,” may help companies with ransomware prevention and response. Additional resources include:
- Current alerts from CISA – https://www.cisa.gov/uscert/ncas/alerts/2022
- CISA dedicated webpage containing ransomware guidance, resources, and alerts – https://www.cisa.gov/ransomware
- CISA’s National Cyber Awareness System – https://us-cert.cisa.gov/ncas/current-activity
- FBI Internet Crime Complaint Center – https://www.ic3.gov/Home/Ransomware
- FBI – https://www.fbi.gov/scams-and-safety/common-scams-and-crimes/ransomware
- U.S. Secret Service (USSS) Preparing for a Cyber Incident – https://www.secretservice.gov/investigation/Preparing-for-a-Cyber-Incident
- NIST Tips and Tactics for Dealing with Ransomware – https://www.nist.gov/news-events/news/2021/05/nist-releases-tips-and-tactics-dealing-ransomware
- Conference of State Bank Supervisors (CSBS)/USSS Ransomware Self-Assessment Tool – https://www.csbs.org/ransomware-self-assessment-tool
Companies that are victims of ransomware are strongly encouraged to contact their local FBI or USSS field office and CISA, using the information below, and their primary federal and state regulators.
FBI
Website: https://www.fbi.gov/contact-us/field-offices
USSS
Website: https://www.secretservice.gov/contact/field-offices
CISA
Website: https://us-cert.cisa.gov/report
Email: Central@cisa.gov
Phone: (888) 282-0870
