Quote:The city of Tulsa, OK is asking some of its residents to keep a close eye on their personal and financial accounts after the Conti ransomware group leaked some 18,000 city files, mostly police citations, on the dark web.

The leak stemmed from a May 6 ransomware attack that caused the city to shut down its network, disrupting its online bill payment systems, utility billing and email. The websites for the city, the Tulsa City Council, the city’s police force and Tulsa 311 also were affected in the attack.

BleepingComputer published a report Wednesday that includes what is purported to be a screenshot of the list of 18,938 files from the city of Tulsa leaked by Conti, which, in addition to police citations, also include internal Word documents.
 
Police citations contain some personal identifiable information (PII) – such as name, date of birth, address and driver’s license number – but do not include Social Security numbers, according to a statement by the city advising people of the leak.
 
“Out of an abundance of caution, anyone who has filed a police report, received a police citation, made a payment with the City, or interacted with the City in any way where PII was shared, whether online, in-person or on paper, prior to May 2021, is being asked to take monitoring precautions,” according to the statement.
 
Some of the ways those potentially affected by the leak can mitigate any potential fallout include monitoring financial accounts and credit reports, asking credit/debit card companies to issue a fraud alert, changing passwords to personal accounts, and adding a second level of authentication to personal accounts and apps, the City advised.