Cyberattacks are no longer a distant risk or isolated to global corporations. In Contra Costa County, the threat is real, recent, and rapidly evolving. From ransomware targeting city governments to phishing campaigns plaguing small businesses, cybercrime has taken root in our own backyard.
Earlier this year, multiple cities in Contra Costa were hit by cyberattacks on the same day and had to declare a local emergency after a ransomware attack disrupted city operations, including police departments being forced to isolate systems following intrusions. These events, along with other incidents affecting small businesses in East County, underscore the growing urgency of cybersecurity.
“Right now what they’re doing is conducting a forensic audit so they can kind of see what happened,” said Contra Costa Supervisor Diane Burgis in response to on of the attacks. Supervisor John Gioia added, “Things are coming back online. Their belief is things are controlled. But things are always gradually brought back up to make sure that security won’t be compromised.”
These are not isolated cases. In July 2024, the Central Contra Costa Transit Authority reported a data breach affecting rider information. In 2021, the Employment and Human Services Department faced a data breach involving sensitive personal information. And just months ago, the County issued a Request for Proposals for a Managed Services Providers (MSPs) to implement 24/7 monitoring and threat detection across county systems.
The Financial and Operational Impact
Cyberattacks can cost businesses millions. Global estimates peg the average cost of a breach at $4.88 million, with small to mid-sized businesses often facing devastating operational and reputational damage. In Contra Costa, many businesses and local governments have turned to cyber insurance and managed services to mitigate risks. It is important to note that cyber insurance will not cover any damages or losses if a layered cybersecurity stack of preventions tools and is not in place.
“We’ve seen a 60% increase in ransomware attempts via phishing over the last year,” shared a Walnut Creek IT service provider who requested anonymity. “The scariest part? Our clients didn’t even notice for days.”
Cybercriminals often lie dormant within systems before launching attacks, increasing the likelihood of widespread damage. For business owners, even a few hours of downtime can mean lost revenue and trust.
What Businesses Can Do Now
“The impact of this crime is not only affecting government or enterprise business, it is destroying small businesses in our county and nation. Most companies do not have an adequate cybersecurity software stack or experienced Security Operations team to prevent the onslaught of this crime. Sadly, 60% of small businesses close within 6 months of a cyberattack. The rate at which this has grown is astonishing,” said Seana Fippin, of Red Box Business Solutions a local Managed Service Provider (MSP). Local experts like Fippin, and government agencies, recommend the following immediate actions for businesses:
- Conduct cybersecurity risk assessments by an MSP like Red Box to identify gaps.
- Implement layered security with firewalls, endpoint detection, multi-factor authentication (MFA), and encrypted backups.
- Regularly update software to patch vulnerabilities.
- Train employees to spot phishing emails and report suspicious activity.
- Develop an incident response plan that includes legal, IT, and public relations.
Contra Costa County’s Department of Information Technology (DoIT) has implemented a full suite of security services, including 24/7 monitoring, employee training, and data loss prevention tools.
Resources for Local Businesses
To support proactive defense, the following resources are available:
- Contra Costa DoIT InfoSec Office: Offers employee training, vulnerability scanning, and policy support.
- CISA and FBI InfraGard: Provide up-to-date threat intelligence and community briefings.
- Managed Service Providers : MSP’s like Red Box offer outsourced 24/7 monitoring and response to safely detect and prevent these breach.
- Cyber Insurance Providers: Coverage for legal, technical, and financial recovery.
- Cyber Awareness Platforms: Tools and software provided by MSPs deliver phishing simulations and staff training modules to help prevent these types of attacks.
A Call to Action
Contra Costa County is taking cybersecurity seriously. But as threats multiply and evolve, collaboration between the public and private sectors is essential. Investments in training, technology, and trusted partnerships are critical for small businesses to build resilience.
Local leaders, small business owners, and IT experts all agree: the time to act is now. By preparing today, Contra Costa can secure tomorrow.
Bay Area Tech Day 2024
BUSINESS LEADERS, YOU are invited to join for this EXTREMELY VALUEABLE and INFORMATION-PACKED program by experts from throughout country. Come, network with some of the best in the business and learn about:
About
At Red Box Business Solutions, we believe technology should be a tool, not a burden. We work with you to develop an IT strategy that aligns with your business goals. We’re passionate about helping businesses use technology effectively. Our solutions are flexible and can adapt as your business evolves. We’re all about clear communication and building strong relationships with our clients. Red Box Business Solutions provides IT Support throughout San Francisco Bay Area. Our team of experts provides reliable on-site support. We’re there when you need us, ensuring seamless productivity within your systems and providing the level of attention your business deserves. We value long-term relationships with our clients and will work closely with your business to ensure that you have all the technology resources for software and hardware that you need to be successful. You may contact them at [email protected].
