City of Tulsa gives update after learning 18,000 city files put on dark web

TULSA, Okla. (KOKI) — The City of Tulsa is now urging residents to take extra precautions after they say personal information has been posted to the dark web.

The City addressed the public Wednesday at 4 p.m.

The City says they were made aware that the persons responsible for May 2021 ransomware attack shared more than 18,000 City files via the dark web Tuesday.

The files were mostly in the form of police citations and internal department files. They say police citations contain some Personal Identifiable Information (PII) such as name, date of birth, address and driver’s license number. The citations do not include social security numbers.

No other files are known to have been share, but out of an abundance of caution, anyone who has filed a police report, received a police citation, made a payment with the City, or interacted with the City in any way where PII was shared, whether online, in-person or on paper, prior to May 2021, is being asked to take monitoring precautions.

Residents are asked to:

  • Monitor financial accounts and credit reports
  • Get with credit/debit card companies to issue a fraud alert
  • Change passwords to personal accounts
  • Take additional authentication measures in all personal accounts and applications

For additional information on how to protect your privacy, visit the Oklahoma Department of Consumer Credit website.

The City’s Incident Response Team and federal authorities are continuing to investigate the data breach and monitor any information being shared.

Following the cyber attack in May, the City says their main priority has been to restore critical resources and mission-essential functions, which include public-facing systems and internal communications and network access functions, as PII had not been shared. Business recovery teams had reportedly categorized and prioritized system restoration efforts and have continued their work to restore and validate business systems within the City.

During the news conference, city leaders said they should have all systems up again by October 2021, with core systems fully restored in the next few months.