Solano County’s library network, part of the San Francisco Bay Area, has faced significant disruption due to a cyberattack that began on April 5. This attack targeted the Solano Partner Libraries and St. Helena network, known as SPLASH, and led to the disabling of phone lines, computer services, and Wi-Fi across its branches. The hackers behind this assault demanded a $100,000 ransom and threatened to release data they claimed to have stolen if their demands were not met. Despite the disruption, the libraries have managed to keep their doors open, maintaining basic operations and access to physical materials.
Officials from St. Helena, located in neighboring Napa County, confirmed that the hackers primarily targeted the Solano County Library system, affecting public internet access and internal record-keeping systems across its nine libraries in cities including Dixon, Fairfield, and Vacaville. In response to the attack, Solano County’s chief information officer and registrar of voters, Tim Flanagan, stated that the county acted swiftly to secure their systems and began efforts to restore full functionality. To assist with these efforts, the county engaged third-party computer specialists to investigate the cause and determine the extent of the impact on their systems.
Although the attack disrupted significant technological services, Solano County libraries remain operational. The public can still check out items and participate in on-site programs. The library has also emphasized that its 24/7 digital library services, which include eBooks and streaming movies, are available to the public, ensuring continued access to digital resources despite the cyber challenges.
The incident’s impact extends to the Benicia library, which operates in conjunction with the county system but has managed to maintain some services like public Wi-Fi through secure internet hotspots. Benicia’s library director, Jennifer Baker, noted that while the self-checkout machines, public printing, and computer services are affected, they are handling the situation day by day with expectations of service restoration varying from a few weeks to possibly a month or more. This attack highlights the ongoing vulnerability of public digital infrastructures to cyber threats and underscores the importance of robust cybersecurity measures to protect sensitive data and maintain public services.