--- title: Ransomware Attack Costs $1.5 Million in Riviera Beach, FL description: It sounds like officials in Riviera Beach, FL could have avoided paying to unlock a ransomware attack if they had followed some basic data protection strategies. canonical_url: https://www.acronis.com/en/blog/posts/ransomware-attack-costs-15-million-riviera-beach-fl/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Ransomware Attack Costs $1.5 Million in Riviera Beach, FL The city of Riviera Beach, Florida made news recently when it announced it was paying approximately $600,000 in ransom to undo a ransomware attack it suffered in late May. In addition to the ransom paid, officials also invested more than $900,000 into new hardware in the hopes that they do not have the same vulnerabilities as the old ones. That’s $1.5 million in damages from one attack. [Learn More](https://www.acronis.com/en/products/cyber-protect/) [![Image 2: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png)](https://www.acronis.com/en/blog/authors/acronis-security-team/ "MSP Threats Security Team") [MSP Threats Security Team](https://www.acronis.com/en/blog/authors/acronis-security-team/) 3 min read Last updated 01 September 2021 Ransomware continues to be a nightmare for individuals and businesses worldwide – but in the U.S., municipal government offices increasingly seem to be the target of choice for cybercriminals. The city of Riviera Beach, Florida made news recently when it announced it was paying approximately $600,000 in ransom to undo a ransomware attack it suffered in late May. While not usually advised by law enforcement and security companies, city officials concluded that there was no other way to recover the files so the decision was made to pay the ransom. Handing over 65 bitcoins doesn’t guarantee that their data will be restored, though. When Palm Springs in Palm Beach County was hit in 2018, officials paid an undisclosed ransom but still lost two years of data. In fact, less than half of those who pay a ransom ever regain access to their data. In addition to the ransom paid, Riviera Beach also invested more than $900,000 into new hardware in the hopes that they do not have the same vulnerabilities as the old ones. That’s $1.5 million in damages from one attack. Unfortunately, it sounds like city officials could have avoided making this payment and additional investment if they had followed some basic data protection strategies. ### Costly attack In the case of Riviera Beach, there was more to the attack’s success than an unpatched software vulnerability. Based on news reports, it seems that proper backups of the city’s data were never made, the government offices weren’t using the best anti-malware protection, and human error played a big role. Put another way: someone in the police department opened a malicious email attachment that eventually locked files and shut down all of the city's services, causing more than $1.5 million in damages so far. More than three weeks later, no computer systems are working properly, crippling the government offices. The city’s website and email are partially working, as are the finance department and water utility – but many other services are still offline. ### The latest in a string of ransomware attacks This is just the most recent case where a government office paid a ransom out of desperation. In March, officials in Jackson County, Georgia paid hackers $400,000 to regain access to their files. During the past two years, more than 50 cities across the U.S. have been victims of ransomware attacks, including [Atlanta, GA](https://www.acronis.com/en-us/blog/posts/ransomware-attack-cost-atlanta-over-10m-would-have-been-stopped-acronis-active-protection/); [Baltimore, MD; Greenville, NC](https://www.acronis.com/en-us/blog/posts/robbinhood-new-ransomware-variant-crippling-municipal-governments-us); Albany, NY; Imperial County, CA; Cleveland, OH; Augusta, ME; and Lynn, MA. Even transportation services that are related to municipal government – like the [Port of San Diego](https://www.acronis.com/en-us/blog/posts/ransomware-attacks-sail-san-diego-and-barcelona) – have been targeted. Ransomware still accounts for nearly 24% of malware incidents, according to Verizon's 2019 Data Breach Investigations Report (DBIR). ### Time to learn the lesson (again) While not every attack will be costly as much as the Riviera Beach or Atlanta attacks, the fact that these costs could be avoided is disturbing. First, continuous cybersecurity training of personnel to reinforce best practices of avoiding attacks on public computer systems would help avoid infection, meaning no ransom would need to be paid. In addition, deploying a proper backup solution like [Acronis Backup](https://www.acronis.com/en-us/business/backup/) that includes an integrated anti-ransomware defense would help ensure an organization has a safe copy of their data. In the case of Riviera Beach, even a simple backup could restore their machines in a matter of several days if not faster. Add the layer of a proactive, AI-enabled technology like [Acronis Active Protection](https://www.acronis.com/en-us/active-protection/), and the incident may not happen at all since the attack would be detected and stopped in real time and affected files would be restored back in a matter of seconds. Acronis Active Protection deals extremely well with unknown, zero-day threats – an important consideration as more and more ransomware strains are crafted specifically for the chosen victim. ### Final thought Ransomware continues to threaten municipalities, companies, and individuals. In addition to deploying a complete cyber protection solution like [Acronis Backup](https://www.acronis.com/en-us/business/backup/), there are simple security rules we’ve recommended for years that shouldn’t be overlooked. * Install software patches regularly to fix vulnerabilities * Activate a quality anti-malware solution * Replace outdated and unsupported operating systems * Train your personnel on security awareness regularly Try Acronis Backup [free for 30 days](https://www.acronis.com/en-us/business/backup/trial/) to see what true cyber protection looks like. Already using Acronis Backup? Don’t forget to activate Acronis Active Protection to benefit from its anti-ransomware defense. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 3: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png) MSP Threats Security Team [Previous post](https://www.acronis.com/en/blog/posts/cashing-crime-gandcrab-may-end-threat-ransomware-continues/) [Cashing In on Crime: GandCrab May End, But The Threat of Ransomware Continues](https://www.acronis.com/en/blog/posts/cashing-crime-gandcrab-may-end-threat-ransomware-continues/) [Next post](https://www.acronis.com/en/blog/posts/managed-it-services/) [Why Delivering Managed IT Services is Advantageous – and How to Sell Them with Ease](https://www.acronis.com/en/blog/posts/managed-it-services/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read