Budget Committee

Cyberattack and Hard

Rock Cost Update
City of New Orleans
February 4th, 2020
Table of Contents

1. Cyberattack Incident Response

2. Cyberattack Related Expenses
3. Unknown Expenses
4. Hard Rock Costs

City of New Orleans 1

 Overview of Incident
1 Response
Overview of Incident Response
On December 13th, 2019 the City was the target of a coordinated and
sophisticated cyberattack.

 As soon as the City discovered the intrusion, we reacted quickly and

decisively to shut down our infrastructure and sever all connections
to the internet.
 This action allowed the City to halt the spread of the intrusion and
prevent further activity.
 The City then immediately launched into a two step plan that allowed
us to:
- secure and rebuild our network
- restore critical services

City of New Orleans 3

Overview of Incident Response (Cont’d)
With the help of the National Guard and the State's Office of Technology
Services the City was able to begin recovery efforts quickly
Actions Taken
 Cleaned servers and computers: Wiped almost
3500 computers and began scanning and
restoring 400+ servers.
 Instituted enhanced cyber security practices:
Implemented new cyber security tools and
security policies that make our environment more
secure and resilient.
 Re-established Communications: Restored
phones and internet access. Activated emails for
many City employees (~3000).
 Restored computers: Following the initial
cleaning we have now set up and configured
nearly all usable workstations.
City of New Orleans
Services Restored
 Re-launched City website, with access to online
property tax payments, and online sales tax
payments.
 Restored City user access to BRASS, our ERP,
to allow the City to resume processing of vendor
invoices.
 Enabled Municipal/Traffic Court to resume
operations as of January 22nd.
 Re-established access to core systems for NOFD
and NOPD.
 Supported Mardi Gras planning efforts by
focusing data recovery on Mardi Gras support
needs.
4
 Cyberattack Related
2 Expenses
Cyberattack Related Expenses
The City has expended approximately $3M to date with over $4M in
estimated future costs
Item Cost Type Amount
Clean and Rebuild Environment Incurred $1,220,500
Re-Establish City E-mail Services Incurred $896,000
Networking Infrastructure Incurred $832,000
Personnel – Overtime for ITI staff Incurred $50,000
Replacement of outdated equipment Future $750,000+
Public safety networking investments Future $400,000+
New Security Tools Future $875,000+
Supplemental Staffing Future $750,000+
Cybersecurity Team Staffing Future $350,000+
Legacy software replacements Future $1,000,000+
TOTAL $7,123,500+
City of New Orleans 6
3 Unknown Expenses
Unknown Expenses
Potential future expenses related to the recovery from the cyberattack are
unknown at this time

 The City will begin to assess mid to low priority applications and
determine if they can be restored.
 If the applications are old and no longer vendor supported we
often need to obtain new applications to fulfill those business
needs as restoring the old application is not viable.

City of New Orleans 8

4 Hard Rock Costs
 Estimated Hard Rock Costs Through December 2019
Cost Type Item Amount
Street, subsurface, and drainage repair estimate for Rampart $1,200,000
Damages Capital damage estimate to street cars, line poles, infrastructure $850,000
Roof repair estimate for Saenger $750,000
Changes to RTA operations including new and alternate routes $3,210,000
Lost Revenue Lost fare box revenue $1,605,000
Saenger estimated losses from wicked $100,000
Personnel Public safety, leadership, and support payroll $2,219,000
24/7 Firewatch at Hard Rock site estimate $927,801
Public safety vehicles, equipment, apparatus, etc $256,115
Engineering consulting contract $250,000
NOHSEP mobile command $153,000
OPSE details from 10-25 through 11-12 (outstanding invoice owed by 1031 Canal Development) $70,000
NOPD mobile command $20,184
Public safety vehicles - fuel $13,000
Public Safety Trash collection at command center $10,164
Light tower rental and fuel $10,000
6x40 containers to protect Saenger (including delivery) $8,000
Misc supplies (paper, printer ink, pens, markers, batteries) $7,753
Towing vehicles out of garage next to Hard Rock site $5,000
Door knocker warnings - English & Spanish $1,446
LSP transportation bill - Crane $1,210
Personal protective equipment (earplugs and respirators) $433
ESTIMATED TOTAL $11,668,106
Questions?
City of New Orleans