Defending The Digital State: Protecting Critical Infrastructure & Citizen Services from Ransomware Threats

Since 2018 there have been more than 4,300 ransomware attacks on businesses, educational institutions, healthcare facilities, and federal/state/local agencies. While the majority have targeted businesses, the three remaining groups all tie to governmental responsibilities, especially at the state and local levels.

This means that ransomware attacks continue to pose an existential threat to state governments, disrupting essential services, compromising sensitive citizen data, and eroding public trust. State governments have become prime targets due to often-limited cybersecurity budgets, legacy systems, and the high-value, sensitive data they maintain. State systems often serve as linchpins for healthcare, education, transportation, and public safety; a breach can cascade across entire communities.

As cybercriminals increasingly target state and local government infrastructure—from DMV systems and healthcare services to emergency response networks—IT and security leaders face mounting pressure to defend against sophisticated attack vectors while maintaining seamless citizen experiences. The cost of prevention is dramatically lower than recovery, with average state ransomware incidents costing millions in remediation and lost productivity.

Learning Objectives:

• Identify recent ransomware trends targeting state governments and public sector infrastructure
• Understand the evolution of ransomware-as-a-service (RaaS) and nation-state actors
• Review common attack vectors: phishing, supply chain vulnerabilities, and unpatched systems
• Outline the roles of Zero Trust and defense-in-depth to protect against ransomware attacks, including across distributed state networks