By JAN McLAUGHLIN
BG Independent News
On the heels of paying a $1.5 million ransom to restore Wood County’s government computer network, the county’s top priority in next year’s budget is beefing up its cybersecurity.
The Wood County Commissioners on Thursday morning approved $55 million in appropriations for 2025.
“Despite the recent cybersecurity incident, Wood County finances remain healthy going into 2025,” Wood County Administrator Carri Stanley said. The county’s reserve funds, set aside for emergency and other unanticipated expenditures, allowed for the payment of the $1.5 million without impacting the county’s 2025 budget.
(A story on next year’s appropriations will be posted Friday in BG Independent News.)
It’s unlikely that county citizens will learn how the ransomware infiltrated the county network. Wood County Prosecuting Attorney Paul Dobson said this morning that for security purposes the county has been advised by national security experts to not reveal the details.
“We will probably never tell the public how the incident occurred,” Dobson said.
While the $1.5 million ransom came from county reserve funds, county insurance coverage paid for the hiring of experts brought in to resolve the problem, Dobson said.
Though he would not reveal the amount of the original ransom request, Dobson did say the consultants negotiated a lower price.
“They were able to get the price down,” he said.
The cyber attack investigation is now in the hands of the FBI, Dobson said.
One of the priority issues to be resolved was fixing the computer aided dispatching and records management system at the Wood County Sheriff’s Office. Some police departments in the county that are linked to the CAD system are still working to get full functions back.
Investigations continue to determine if any personal information was compromised during the cyber attack. Dobson assured that if personal data was stolen, the county will provide notification to anyone affected, as required.
When asked if any county employees will lose their jobs or be disciplined for the ransomware infiltration, Dobson said the focus has been on restoring the system.
Wood County Commissioner Craig LaHote echoed that statement on possible disciplinary measures.
“I think it’s too soon to say. We’ve been working on resolving this,” LaHote said.
Though no specific dollar amount was assigned to cybersecurity measures in next year’s budget, the ransomware attack pushed that into the top priority.
“While Wood County has spent substantial funds in the past on the security of its digital data and computer network, the top priority for 2025 will be focused investment in this area,” Stanley said. “We will be partnering with a nationally recognized third-party consultant to obtain ongoing security evaluations, guidance and recommendations for our systems, and we will be making significant IT investments.”
In a letter sent out to county employees, the commissioners recognized employee efforts during the cyberattack.
“In the midst of significant challenges, we saw remarkable cooperation and resiliency throughout county government, and we are grateful for your efforts,” the county commissioners stated.
During Thursday morning’s appropriations meeting, Wood County Clerk of Courts Doug Cubberley praised the teamwork that got the county through the 2½-week ransomware ordeal.
“The leadership is phenomenal. I know it was a trying time,” Cubberley said. “I know we still have a lot to do. I’m very appreciative to be part of this team.”
The ransomware was first detected on Dec. 9 by the Wood County Information Technology Department. The decision to pay the $1.5 million ransom was made based on guidance from a team of nationally recognized third-party cybersecurity and data forensic consultants.
“While making the payment was a difficult choice, the commissioners determined it was the necessary approach to best serve the interests of Wood County residents and employees,” a press release stated.
