Cyberattack on Puerto Rico IT vendor Truenorth hits 3 agencies

According to Dysruption Hub, Puerto Rico officials say a Thanksgiving-week cyberattack on IT contractor Truenorth Corporation briefly disrupted systems at three major agencies but did not compromise citizen data, even as independent reporting describes a broader ransomware incident.

The attack targeted Truenorth, an IT services firm that runs key systems for multiple Puerto Rico government agencies, and rippled into the Department of Education, the Puerto Rico Health Insurance Administration (ASES) and the State Insurance Fund Corporation (CFSE). Truenorth holds information-systems contracts with about 14 agencies, including the State Elections Commission, which authorities say was not affected.

The incident began on Tuesday, 25 November, when a ransomware attack was detected against Truenorth and quickly impacted systems used by CFSE, ASES and Education. Read more at Dysruption Hub.