Reports

This policy brief builds on findings from a 2023 statewide assessment of cyber-readiness across Florida’s critical infrastructure sectors. Commissioned by the State Legislature, the original report emphasized the urgent need to close the maturity gap in basic ransomware readiness by 2025. In light of continued ransomware attacks that have disrupted vital services—including healthcare, education, the courts, and local government—this follow-up brief provides a focused analysis of ransomware vulnerabilities among CI providers and outlines a clear, actionable path to enhance statewide cyber-resilience.

n

Prepared by University of South Florida graduate students, this report provides an in-depth analysis of 18 high-profile ransomware incidents targeting Florida public sector entities between 2016-2019. This technical analysis reviews the targets, suspected perpetrators, and tactics used to conduct the attacks. The information gathered is useful for ransomware researchers and security analysts looking for patterns and commonalities among targets and tactics to aid in preventing future attacks.

n

In 2019, Cyber Florida in partnership with the Florida League of Cities, the Florida Local Government Information Systems Association, and others conducted a survey of county and municipal IT managers to determine how prepared they feel they are to respond to and recover from a cyberattack and what the chief obstacles are to become better prepared and more resilient. The outcome was shared with local and state government leaders to help inform decision-making, budgeting, and future legislative initiatives.