FBI investigating ransomware attack on City of Greenville’s network


The Federal Bureau of Investigation is investigating the ransomware virus that has infected the City of Greenville’s network. 

Members of the National Guard, NC Department of Information Technology, NC Emergency Management, and NCLGISA are assisting as well.

Public Information Officer Brock Letchworth said the ransomware name is ‘Robbinhood’.

The ransomware has locked all of the city’s files, and the ransomware asking for payment in order to get access to the files.

Letchworth said the city is not prepared to say at this time what the payment request is.

He said they have not agreed to make such a payment, and the city will explore all options for remedying the situation.

IT professionals and outside agencies working to figure out at what point the city’s servers became infected with ransomware.

Letchworth said the city became aware of the virus when someone in the police department noticed there was an issue on one of their machines Wednesday morning.

Letchworth said the ransomware has affected all city departments.

There are 800 machines city wide.

It is unclear exactly how many are affected, but Letchworth said the majority are.

Letchworth said they shut everything down on Wednesday to prevent additional spreading.

City staff is working to determine the source and the extent of the infection.

They are sharing their machines with the FBI as part of the criminal investigation that is underway.

While the computers are shut down, Letchworth said the city’s operations continue.

“It is important to note that computers don’t run cities,” said the release. People do. All of our operations are continuing, although we are having to adjust some of the ways that we do things in some areas. It takes you back about 25-30 years where it is a lot of paper and pencil. We are able to use some laptops with wifi and things like that. We are just having to tweak some things that we would normally do.” 

At this time, there is no reason to believe that any personal information has been compromisedand there are no public safety concerns related to this virus.

“They [police] are still out patrolling and getting dispatch calls and calls for service,” Letchworth said.

All City phones are still operational.

For the public’s reference, here is a list of phone numbers when contacting the City:

  • Emergencies: 911
  • Police non-emergency: 329-4317
  • Fire/Rescue non-emergency: 329-4390
  • Public Works Department: 329-4522
  • Recreation and Parks Department: 329-4567
  • City Manager’s Office: 329-4432
  • Community Development Department: 329-4504
  • Human Resources Department: 329-4492
  • Financial Services Department: 329-4444


The City of Greenville says all of its computers are currently down, as of Wednesday morning.

Officials are working to find and repair the issues that are causing the computer problems as soon as possible, but all City phones are still operational.

Copyright 2021 Nexstar Media Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

LKQD Outstream