PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Second Florida City Decides to Pay Ransomware Hackers

On Monday, Lake City, Fla. reportedly authorized its insurer to send the hackers 42 bitcoins ($500,000) in exchange for a decryption key to free computers hit earlier this month. The Ryuk ransomware strain was involved in the attack.

 & Michael Kan Principal Reporter

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

A second Florida city is giving in to the hackers behind a ransomware attack, offering them $500,000 to free its computers.

On Monday, Lake City authorized its insurer to send the hackers 42 bitcoins, according to The Gainesville Sun. The city itself will only pay a $10,000 deductible on its insurance policy, while the Florida League of Cities will pay the actual ransom fee.

The ransomware attack occurred on June 10, disrupting IT systems across the city, including email and landline phones. According to a city spokesman, the hackers used the Ryuk ransomware program to infect the municipal computers, and were able to encrypt various kinds of data, including city permits, email messages, payroll documents and historical data.

Ransomware works by encrypting files, and then holding them hostage until the victim pays up. The more dangerous strains, such as Ryuk, can also attempt to spread to other computers on the same network.

City officials initially said they were on the way to restoring municipal systems. "Data recovery efforts have so far been successful," the city police department said two days after the attack.

However, local media reports say Lake City encountered troubles disinfecting many of the systems hit in the attack. The hackers then sent the city a ransom request for 42 bitcoins in exchange for a decryption key to free the computers.

"If this process works, it would save the city substantially in both time and money," city manager Joe Helfenberger said in a statement.

Lake City spokesman Mike Lee said both the city's insurer and IT staff recommended the city council authorize making the ransom payment. The hackers responded by giving a decryption key, which appears to be working, he added.

Last week, another Florida city, Riviera Beach, voted to let its insurer pay 65 bitcoins to the hackers behind a ransomware attack that infected municipal computers. The FBI and IT security firms generally advise against paying ransomware hackers. Doing so can keep the hackers well funded and incentivize them to strike again. There's also no guarantee victims will get their data back.

To guard against ransomware attacks, security experts advise businesses and city governments to routinely backup any critical data and patch vulnerabilities in their IT systems.

Editor's Note: This story has been updated with additional information from the Lake City's public information officer.

About Our Expert

Michael Kan

Michael Kan

Principal Reporter

My Experience

I've been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I'm currently based in San Francisco, but previously spent over five years in China, covering the country's technology sector.

Since 2020, I've covered the launch and explosive growth of SpaceX's Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I've combed through FCC filings for the latest news and driven to remote corners of California to test Starlink's cellular service.

I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.

I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I'm now following how the AI-driven memory shortage is impacting the entire consumer electronics market. I'm always eager to learn more, so please jump in the comments with feedback and send me tips.

The Best Tech I've Had:

  • My first video game console: a Nintendo Famicom
  • I loved my Sega Saturn despite PlayStation's popularity.
  • The iPod Video I received as a gift in college
  • Xbox 360 FTW
  • The Galaxy Nexus was the first smartphone I was proud to own.
  • The PC desktop I built in 2013, which still works to this day.

Read full bio