MORTON, Minn. – A elegant ransomware attack has severely impacted the Lower Sioux Indian Community in Minnesota, disrupting operations at Jackpot Junction Casino Hotel and crippling essential communication systems across tribal government offices, healthcare facilities, and early childhood education programs. The attack, which began unfolding over the past week, highlights the increasing vulnerability of tribal nations and businesses to cyber threats and the potentially devastating consequences for their communities.

The Lower Sioux Government Center confirmed the attack in a Facebook post on Wednesday, stating: “We are currently addressing a ransomware event. We promptly took steps to contain the activity, including taking certain systems offline.” The post acknowledged the disruption to guest services and assured the community that efforts were underway “to return to normal operations as quickly and as securely as possible.”

Adding to the disruption, on Thursday, the Lower Sioux Government Center announced an early closure at noon for government offices, citing it as “part of our ongoing response to the cybersecurity incident.”

Initial reports of technical difficulties at Jackpot Junction and Lower Sioux business phones surfaced late last week, with the Lower sioux Government Center reporting phone outages on March 28 via Facebook. as of thursday, a message displayed on the Jackpot Junction website confirmed that slot machines and kiosks remained out of service, and bingo games were canceled indefinitely.This shutdown not only impacts revenue for the tribe but also disrupts a vital source of entertainment and community gathering.

RansomHub Claims responsibility

The severity of the situation escalated when a criminal group known as RansomHub claimed responsibility for the attack on Monday, according to the Minnesota Star Tribune.This group, believed to be operating out of Russia, has reportedly targeted hundreds of victims as its emergence in February 2024. Their claim underscores the global reach of cybercrime and the challenges faced by organizations in defending against these sophisticated actors.

The Lower Sioux Community is not alone in facing such threats. Casinos across the United States have become increasingly attractive targets for cybercriminals. The 2023 data breach at MGM Resorts in Las Vegas serves as a stark reminder of the potential damage, both financial and reputational, that these attacks can inflict. Moreover,a separate ransomware attack targeted tribal casinos in Michigan in February,demonstrating a pattern of cybercriminals targeting tribal gaming operations.

These incidents highlight a growing trend of cyberattacks targeting the gaming and hospitality industries, sectors that handle large volumes of sensitive customer data and rely heavily on interconnected systems.

Community-Wide Impact

The cyberattack extended beyond jackpot Junction, impacting critical community services. The Lower Sioux Health Care Center announced on Facebook that some of their communication systems were taken offline as the community worked to mitigate the incident. A letter posted on Facebook by the health Care Center specified that tribal phones, fax machines, and email systems were all affected. this disruption to communication channels poses important challenges for healthcare providers in coordinating patient care and managing emergencies.

“The Tribe is working with third party experts to address the incident, with the goal of returning to normal operations as quickly and as safely as possible,” the letter stated, emphasizing the tribe’s commitment to restoring services and protecting its community.

The Lower Sioux Community’s Head Start programme, C̣aƞṡayapi Waḳaƞyeża Owayawa Oṭi, also felt the impact, announcing the use of an alternative phone number to maintain communication with parents. This adaptation underscores the community’s resilience in the face of adversity, but also highlights the added burden placed on families and educators.

Despite the widespread disruption, some services at Jackpot Junction remained operational. Table games and the bar remained open, according to the casino’s website.Moreover, a scheduled concert featuring the Oak Ridge Boys and Phil Vassar proceeded as planned on Saturday night, providing a sense of normalcy amidst the chaos.

The Broader Implications and Cybersecurity Best Practices

This ransomware attack on the Lower Sioux Indian Community is a stark reminder of the urgent need for enhanced cybersecurity measures across all sectors, particularly those vital to community well-being. For tribal nations, casinos represent not just economic engines, but also sources of cultural identity and community support. Protecting these institutions is paramount.

Here are some cybersecurity best practices for organizations to consider:

• Regular Security Audits: Conduct frequent and thorough security assessments to identify vulnerabilities and weaknesses in systems.
• Employee Training: Implement thorough cybersecurity training programs for all employees, educating them about phishing scams, malware threats, and safe online practices.
• Strong Passwords and Multi-Factor Authentication: Enforce the use of strong,unique passwords and multi-factor authentication for all accounts.
• Regular software Updates: Keep all software and operating systems up to date with the latest security patches.
• Data Backups: Implement a robust data backup and recovery plan to ensure business continuity in the event of a cyberattack.
• Incident Response Plan: Develop and regularly test an incident response plan to effectively manage and mitigate the impact of cyber incidents.

For U.S. readers, this incident underscores the importance of supporting cybersecurity initiatives at all levels of government and within local communities. Investing in cybersecurity education, infrastructure, and training can help protect critical institutions and ensure the safety and security of our digital infrastructure.

Recent developments and Future Outlook

As of today, efforts to fully restore all systems at Jackpot Junction and within the lower Sioux Indian Community are ongoing. Third-party cybersecurity experts are working diligently to contain the ransomware, recover affected data, and prevent future attacks.

The incident serves as a critical learning opportunity for other tribal nations and businesses across the country. By sharing information and collaborating on cybersecurity best practices, organizations can collectively strengthen their defenses against evolving cyber threats.

The long-term impact of this attack on the Lower Sioux Indian Community remains to be seen. However, their resilience and commitment to restoring services demonstrate their determination to overcome this challenge and emerge stronger.