BWL working to decrypt hacked files

Posted at 5:49 PM, May 02, 2016
and last updated 2016-05-03 07:33:59-04

The Lansing Board of Water and Light is in recovery mode after ransomware hacked its system one week ago.

"We have reached out to a company that can look and see if we can do anything different to recover from a cyber event like this faster in the future," Peffley said.

The customer service line is back up and running, but things are slow behind the curtain.

Peffley said the internal email is still down, and the files are slowly coming back, but, each one has to be decrypted before it can be accessed.

"We are looking at certain IP addresses that we will no longer allow to access our email system," Peffley said. "That will help eliminate the threats that come into our system on a daily basis."

The virus got in when an employee opened an email that looked like it was from an administrator, and it took the BWL's internal system hostage.

Peffley wouldn't say whether or not he paid a ransom to get those internal files back.

The state police cyber crime unit is looking into the hack. Investigators say, decrypting those files and getting everything back to normal can take some time.

But Peffley says, even though the virus is still in the system, it didn't damage any equipment, and customer information and power sources are safe.