Kidnapping a Library: How Ransomware Taught the British Library to... (Brian Myers)
summary
Ransomware group Rita compromises valid credentials via terminal services because a critical domain lacked MFA exception, stays undetected for days, then exfiltrates roughly 440 GB of finance HR and PII before encrypting and corrupting backups and servers so some systems are unrecoverable. Public report is published; recovery stretches into an 18‑month rebuild that consumes about 40% of cash reserves. Lessons map to well‑known controls: lifecycle replacement, segmentation, tested recovery, staff well‑being and clearer governance.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker setup
- 1:03Speaker background and talk overview
- 3:29British Library scope and systems
- 9:48Attack timeline and ransomware group
- 15:46Immediate aftermath and impact
- 20:00Recovery and long-term consequences
- 26:04Lessons learned and structural issues
- 38:24Conclusion and key takeaways
related talks
21mRansomware Attack: Lessons Learned
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
52mRansomware: How One Company Fought Back
32mSurviving a Ransomware Attack - Lessons from the Field
19mThe aftermath of a crypto-ransomware attack at a large academic institution
38mRansomware and Backups: A Multi-Layered Defense Strategy
52mRansomware 101: Get Smart Understanding Real Attacks
20mWhen ransomware strikes