Inside the malware attack on Lake City, Florida, which paid ~$460K to free 16TB of data, including more than 100 years' worth of municipal records
LAKE CITY, Fla. — Audrey Sikes, city clerk of Lake City, Fla., has a thing for documents: She does not like losing them.
Context & Ripple Effects
Lake City's payment closes a grim Florida sequence: Riviera Beach's council voted to pay ~$600K to hackers who had encrypted its records and disabled email, and less than a week later Lake City followed with its own ransom vote. The Times piece adds the detail that makes it sting — 16TB of data including more than a century of municipal records, the archive city clerk Audrey Sikes had spent her career keeping intact.
The story sits on a longer arc of small-government exposure: the earlier Click2Gov breach hit ~300K people across 46 cities through government payment software, showing municipal systems were already being probed for revenue before ransomware made encryption the extortion tool of choice.
First-order effects
- Lake City pays ~$460K in bitcoin to recover 16TB of data — over a hundred years of municipal records — rather than rebuild from paper backups, a direct budget hit for a small Florida town.
- Riviera Beach and Lake City paying within days of each other confirms to attackers that mid-size Florida municipalities will pay, making their record systems a repeatable target.
Second-order effects
- Neighboring cities and insurers face pressure to price in ransom response: once two towns in one state pay within a week, cyber insurance underwriting and council deliberations shift from 'whether to pay' to 'how fast'.
- Vendors selling backup, email, and payment infrastructure to local governments get a forced sales pitch — every municipal CIO now has a board-level reason to fund offline backups and segmentation.
Third-order effects
- If the pattern holds, ransom payments function as an informal tax on under-resourced local government, and the eventual policy response is likely state or federal minimum-security standards plus rules on paying — foreshadowed by later intrusions like the breach of a Florida water treatment plant via a remote-access computer and the FBI-attributed nation-state compromise of a US municipality through an unpatched Fortinet VPN.
The trend: Municipal IT is becoming a systematically targeted sector where weak defenses, valuable archives, and willingness to pay make local governments the softest recurring target for criminal and state-linked hacking.