Gov. Joe Lombardo said Thursday that it doesn’t appear the recent ransomware attack compromised data related to the state’s financial systems, public assistance programs or the Nevada Department of Motor Vehicles.

Lombardo’s press conference in Las Vegas marked the second time he addressed the public since the state suffered a cyberattack on Aug. 24, shuttering state services and websites — some of which are still not functioning. State officials previously revealed that some state data had been exfiltrated out of Nevada and the state has been working with federal cybersecurity experts to not only recover from the attack but investigate it.

Though state officials have not disclosed many of the specifics of the investigation — citing the sensitivity of the inquiry and possibility it could result in further attacks — the governor spoke in positive terms on Thursday about the recovery’s progress.

“Please rest assured that we will provide any and all updates on this issue as soon as we are able to," he said. "We are doing everything possible to restore systems, protect your information and provide services you can count on."

He also noted that the state does not have evidence that driver’s license data, vehicle registration or personal information from DMV records had been compromised. The same is true for information from Medicaid, the Supplemental Nutrition Assistance Program and Temporary Assistance for Needy Families.

Typically, recovery from these kinds of attacks can take weeks or months, Lombardo said, but the state is “well ahead” of those benchmarks. A timeline for the complete restoration of services was not provided.

Lombardo also noted that although there is no evidence that personal information had been compromised, the state is proceeding “cautiously.”

One bright spot the governor lauded was the ability for residents to complete essential services in person at the DMV, including vehicle registrations and title transfers. He added that beginning Friday, Nevadans can receive licenses in person.

As for costs associated with the cyberattacks and the ongoing investigation, Lombardo said the state has insurance for this type of incident.
For more information on the services affected — and not affected — by the cyberattack, see The Nevada Independent’s updated story here. You can also view all stories related to the cyberattack here.