Cyber Security Incident Update
Updated May 30, 2024, 1 p.m.
The City of Wichita is pleased to report that more City systems are coming back into service following the cyber security event three weeks ago.
The City’s Information Technology team continues to work diligently to get more public-facing systems, including customer water billing, back in service as quickly as possible.
Some external vendor systems, such as Park & Recreation’s summer programming, have already come back online sooner than others. We expect other City systems to go back into service on a rolling basis so we appreciate residents’ patience and understanding that restoring all systems will be more of a process than an event. Systems will only come back into service once they have been thoroughly vetted and tested.
New updates as of May 29, 2024:
- Park & Recreation Department is thrilled to announce that online registration for summer activities is back up and running! Residents can now easily sign up for all our athletic leagues, aquatic programs, summer camps, classes, and even rent swimming pools online! Park and Recreation is also now able to take credit cards in person at all facilities and online. To register for any Wichita Park & Rec program or to rent a swimming pool, please visit https://wichita.gov/Evolve. Join us for a fun-filled and active season ahead!
- Golf Wichita is pleased to announce that we are now able to accept credit card payments both in our clubhouses and through our online store. To book a tee time, register for a tournament, or sign up for a group lesson, please visit our website at golfwichita.com. Current Golf Wichita members will have their scheduled charges processed on Monday, June 3, with no interruptions to their membership. We will begin accepting new members on Wednesday, June 5, starting at 8 a.m.
Updated May 14, 2024, 11:30 am
City of Wichita, KS Provides Notice of Data Event
Wichita, KS – May 14, 2024. The City of Wichita, KS (“City”) values its constituents and prides itself on providing high-quality services to its residents. On May 5, the City disclosed that it made the decision to take its computer systems offline to stop the spread of malware that locks access to computer files. In the last week, the City made great strides in its secure recovery efforts, and looks forward to resuming full operations. Further, the City identified that certain files were copied from its computer network without permission and, as such, published an update on its website at https://www.wichita.gov/alert.
Notice of Data Event
Last updated: May 14, 2024
The City of Wichita (“City”) values its constituents and prides itself on providing high-quality services to its residents. On May 5, the City disclosed that it made the decision to take its computer systems offline to stop the spread of malware that locks access to computer files. In the last week, we have made great strides in our recovery efforts and look forward to resuming full operations.
As part of our thorough review and assessment of this matter, we identified that certain files were copied from our computer network without permission between May 3 and 4, 2024. These files contained law enforcement incident and traffic information, which include names, Social Security numbers, driver’s license or state identification card numbers, and payment card information.
We identified that this matter is related to a recently disclosed security vulnerability that affects organizations throughout the world. Our technical teams have been working around the clock to put the mitigation measures in place to resolve the issue. Further, we are coordinating with law enforcement to investigate this matter further.
We understand that this matter has been an inconvenience for our residents and customers, and for that we appreciate your patience as we work through this process. Whether individuals wish to take additional steps in response to this matter is a personal decision. However, we are providing information about free resources as detailed below should individuals have concerns.
Thank you for your support.
Sincerely,
City of Wichita
Steps Individuals Can Take To Protect Personal Information
Monitor Relevant Accounts
Under U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax, Experian, and TransUnion. To order a free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. Consumers may also directly contact the three major credit reporting bureaus listed below to request a free copy of their credit report.
Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If consumers are the victim of identity theft, they are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should consumers wish to place a fraud alert, please contact any of the three major credit reporting bureaus listed below.
As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in a consumer’s name without consent. However, consumers should be aware that using a credit freeze to take control over who gets access to the personal and financial information in their credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application they make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, consumers cannot be charged to place or lift a credit freeze on their credit report. To request a credit freeze, individuals may need to provide some or all of the following information:
- Full name (including middle initial as well as Jr., Sr., II, III, etc.);
- Social Security number;
- Date of birth;
- Addresses for the prior two to five years;
- Proof of current address, such as a current utility bill or telephone bill;
- A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and
- A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if they are a victim of identity theft.
Should consumers wish to place a credit freeze or fraud alert, please contact the three major credit reporting bureaus listed below:
Equifax—www.equifax.com and 1-888-298-0045
Experian—www.experian.com and 1-888-397-3742
TransUnion—www.transunion.com and 1-800-916-8800
Additional Information
Consumers may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect their personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Ave NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Consumers can obtain further information on how to file such a complaint by way of the contact information listed above. Consumers have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, consumers will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the relevant state Attorney General.
We thank you again for your continued patience as we continue to evaluate this matter. We will keep the webpage up to date at www.wichita.gov/alert as we learn more about restoring services and other additional resources we can provide.
.......................................................................................
The following are updates to our Frequently Asked Questions regarding the cyber security incident. Please visit http://www.wichita.gov/Alert for all the latest updates.
The information technology department and its security partners continue to work around the clock to address the cyber security incident. Many City systems are down as security experts determine the source and extent of the incident. There is no timetable for when systems could be coming back online. We appreciate your patience as we work through this incident as quickly and as thoroughly as possible. Incident recovery information and FAQs are accurate as to the time of the most current information release. For the most current updates, please continue visiting http://www.wichita.gov/Alert.
When will this incident be resolved?
Staff are working diligently and will have resolve the cyber security incide2nt as soon as possible.
When will we know more?
The City is dedicated to providing updates as soon as more information is available.
How do I make a payment to the City of Wichita?
Credit cards payments are not being accepted at this time. Please refer to the service you are making payment to for further information about cash or check payments.
Will live streaming continue for boards and commissions?
The City will make every effort to live stream or record board and commission meetings. There is no guarantee that live streaming will be available, so plan on attending those meetings in person. Wichita City Council meetings will be broadcast on Cox cable channel 7 as well as the City's YouTube channel.
Public Safety:
Is there any impact to Wichita Fire Department operations?
There is NO EXPECTED IMPACT TO RESIDENTS needing fire services. WFD has a system in place to monitor and respond to calls for service.
Is there any impact to Wichita Police Department operations?
WPD implemented continuity measures to mitigate the impact. Our core responsibility remains the same, which is to ensure public safety and provide exceptional customer service to Wichita, thus keeping our community safe.
Water:
Are water systems in any way compromised by the cyber security event?
No. All water systems are secure and functioning as normal.
How do I pay my water bill?
During the cyber security incident we will not shut off water accounts. Anyone having difficulty paying their bill will not receive penalties or late fees until the cyber incident is resolved. Bills may still be paid via cash, check and money order by coming to City Hall or by mailing payment. Payments may also be made at retail outlets like Walmart and Dillons. Customers looking to set up a new water account may do so by calling 316-265-1300 or by coming to City Hall. Auto payments and scheduled payments may process starting 5/10 for the billing cycle that was processed prior to the cyber security event.
If my water is shut off, how do I get reconnected?
During the data breach, we will not be shutting off any water accounts. Those who have experienced a water shut off may bring a $150 payment or proof of $150 payment to City Hall and their water will be reconnected.
How can I contact Public Works and Utilities with water account questions?
Although the Water Call Center cannot view account information at this time you can call and speak with a representative at 316-265-1300.
What do I do if I have a water emergency?
In the event of a water emergency call 316-262-6000.
Call Center:
The City of Wichita Call Center phone numbers are working but live chat on wichita.gov is unavailable at this time.
Transit:
How will I get a bus ticket or pay bus fare?
All Wichita Transit and paratransit services are fare-free until further notice.
How do I request paratransit services?
Please call 316-352-4824 or 316-352-4810.
City Vendors:
The City greatly values our relationships with our various vendors and appreciates their support. Please continue to visit http://www.wichita.gov for the latest updates. Thank you for your patience.
Purchasing:
Bid Opening for Friday May 10 and May 17, 2024 is cancelled. Bid Openings will resume 10:01am Friday, May 24, 2024.
Please refer to ARC (https://customer.e-arc.com/arcEOC/ARCPlanRoom.aspx) for any construction addendums or updates.
In response to the cyber incident, the City Purchasing Division will convene the Board of Bids & Contracts 3:00pm Friday, May 24, 2024 located at 455 N. Main, 12th Floor Wichita, KS 67202 - 12th Floor Conference Room.
Please call the Purchasing Office at 316-268-4636 for any questions or technical assistance.
Park and Recreation:
Wichita Park & Recreation is unable to facilitate credit card transactions, whether conducted online or in-person. Patrons are kindly asked to register for the diverse range of programming outlined below at any of our designated recreation centers during respective operating hours. Detailed information regarding the operational schedules of the centers is conveniently accessible at https://www.wichita.gov/722/Recreation-Centers.
The offerings encompass:
Athletics:
- Adult Leagues
- Youth Leagues
- Miracle League of Wichita
Aquatics:
- Swim Classes
- Scuba
- Swim Team
- Swimming Pool Memberships
Recreation:
Those seeking to procure the rental services of athletic fields, equipment, swimming pools, or venues are encouraged to contact our administrative office directly at 316-268-4361.
For inquiries pertaining to programming at the Riverside Tennis Center, individuals are directed to personally visit the facility during its standard operational hours to complete the registration process. Detailed information regarding the operational hours of the Riverside Tennis Center can be found online at https://www.wichita.gov/1353/Riverside-Tennis-Center.
Golf Wichita
Golf Wichita is presently unable to facilitate credit card transactions, whether conducted online or in-person. We kindly request patrons to ensure they have cash or a check available when visiting any of our golf courses.
Our online booking engine is unavailable. All reservations will be taken by calling your local clubhouse or in person.
We are unable to process registrations for group lessons, tournaments, or the Junior Tour via online. Interested individuals are advised to register for group lessons or tournaments by visiting the respective host locations. For Junior Tour registration, please contact us directly at 316-268-4653.
Please note that Golf Wichita is presently not accepting new membership applications. Existing members with inquiries are encouraged to reach out to us by phone at 316-268-4653 or email at [email protected].
City Licenses:
Can I pay for or obtain a license through the City?
Licenses may be paid for and obtained by coming to City Hall.
City Meetings:
Will City Council, committees and other advisory board meetings be streamed?
While best efforts will be made to continue streaming any previously streamed public meetings or media opportunities, at this time, please plan to attend any City meetings in person.
Landfill:
Are landfill operations still in service?
The landfill is accepting cash only at this time.
Arts and Culture:
Are cultural institutions impacted?
Cultural institutions for the City including CityArts, Cowtown and Indian Museum are able to hold events as scheduled but payments will only be accepted by cash or check. Century II, Botanica and the Wichita Art Museum are not affected.
Municipal Court:
Municipal Court customer service staff has access to docket and warrant information. Individuals may contact 316-268-4611 for their current court dates. There will be ample time for people to clear warrants once we are fully operational. We appreciate your patience during this time and we are sorry inconvenience. Once information services are restored, there will be a process for those who lost contact with the court and received a warrant to clear the warrant without arrest.
Is Municipal Court still in operation?
All scheduled dockets will proceed as planned. There is no walk in docket at this time.
What if I have to pay a Municipal Court fine?
Payments to Municipal Court may be made in person. At this time, only cash and check are being accepted.
Airport:
What impact does this have to the Airport?
No public wi-fi is available at the terminal and arrival and departure screens are not currently working. Flights are operating normally.
Library:
Is the Library open?
Public WiFi is available at the following locations: Alford, Angelou, Rockwell and Westlink branches as well as Libby. Staff can check out materials, but checking in materials, pulling holds and transferring materials between locations might be paused. We are a fine-free library, but will monitor accounts to make sure other fees are not assessed during this time. Public wifi is not available at the following locations: Advanced Learning Library, Evergreen and Walters branches. Other services that may be impacted include: staff email through the City network (if you email us, we might not be able to respond during this outage), the library website, most databases, including Kanopy, LinkedIn Learning, etc, the online catalog, the Self-service print release stations, the self-check stations, the automated materials handler at the Advanced Learning Library – place returns in the manual book drop, most incoming phone call capability.
Resource Centers:
Are neighborhood resource centers still operational?
Wi-fi and phones are currently down. Unless otherwise noted, all scheduled events services are operational. \
Planning:
Is Planning still able to process cases?
All planning activities will continue. Payments may be made with cash or check.
MABCD:
Is MABCD operational?
There is no expected interruption to MABCD activities.
Housing:
How is Housing and Community Services impacted?
At this time, staff are working to serve those needing Housing and Community services Assistance as well as we can. Staff will contact those needing service as soon as possible.
General Information
What Happened?
On May 5, 2024, certain City systems were encrypted by malware. In response, some computer network and systems were shut down to prevent the spread of the malware. Certain services may be temporarily unavailable while systems are offline. The City is enabling business continuity measures, where appropriate, to minimize disruption and is working with third-party specialists to safely and securely restore the computer network.
What is encryption malware?
Encryption malware is a type of computer virus that locks files without permission. A third party then seeks payment for a key to unlock the computer files. This is often called ransomware, which uses computer software to lock files and withhold the key to unlock the files until a payment is made. Unfortunately, government organizations are often targeted by these groups.
Has law enforcement been notified?
Yes, federal and local law enforcement authorities are assisting with this matter.
What group is claiming responsibility?
This is not being shared for operational security purposes.
What is the impact on data?
We are completing a thorough review and assessment of this matter, including the potential impact on data. Detailed assessments of these types of incidents take time. We thank you for your patience, understanding, and respect for the integrity of this review process.
Are first responders (Fire/Police) still providing services?
Yes, they are. They are prepared for these matters and have switched to business continuity measures where appropriate to continue providing exceptional service.
When will systems be back online?
We are working with specialists to thoroughly review and assess systems before putting them back online. Systems will be restored on a staggered basis to minimize disruptions. We do not have a definitive timeline for returning all systems to production.
Media requests:
We encourage media and residents to visit wichita.gov/alert for the latest updates and FAQs about this incident.http://www.wichita.gov/Alert