The US city of Oakland, located in California, is still recovering from a ransomware attack on February 8 that shut down most of the city’s services. Policemen had to come back to traditional methods of conducting patrols – using portable radios, pens and paper. And Harold Duffy, acting head of the city administration, had to announce state of emergency in Auckland.

The hackers responsible for the attack leaked nearly 10 gigabytes of sensitive government files on their official ransomware leak site. What’s more, the attackers are threatening to reveal more of the stolen information in the coming weeks.

Oakland did not disclose how much ransom the Play group asked for in exchange for the stolen data. In any case, as it became clear from the current situation, the city administration did not pay any ransom.

The stolen data posted on the Play website reportedly includes 12 years of city listings that list thousands of current and past social security and driver’s license numbers, dates of birth and home addresses of city employees and other citizens.

Personal files belonging to the mayor of Auckland and his predecessor were also released. The stolen documents include hundreds of records related to allegations of police misconduct and scanned bank statements from the city’s bank account, etc.

“We actively notify individuals whose data has been identified as public, and also provide them with all the resources to protect personal information,” the city administration said.

The city of Oakland is the latest target of the Play ransomware gang. The city has become the 42nd victim of the group since it first became known in June 2022.