How 1 weak password shut down an entire city…

26 Apr 2026 · 1 min

Watch on YouTube

1:00

In this video segment, Dan Novaes recounts the 2018 SamSam ransomware attack on the city of Atlanta, emphasizing that the breach stemmed from a single, easily guessed employee password that had never been updated. Hackers used this weak credential to infiltrate the municipal network, silently spread ransomware, and encrypt critical files, causing citywide service outages—including police records, court documents, and utility payments. The attackers demanded a $50,000 ransom, which the city refused, leading to a prolonged recovery that cost over $17 million. Novaes stresses that the attack was not a sophisticated operation but a preventable failure, illustrating how minimal security lapses can cripple entire digital infrastructures.

Chapters

In 2018, a single cyberattack shut down an entire city's systems. And all it took was one weak password. The city was Atlanta. The attack used ransomware called SamSam. Hackers broke into the city's network, not with advanced tools, but through a simple vulnerability—an employee password, easy to guess, never updated. Once inside, the attackers spread silently, encrypting files, locking systems. Then everything stopped. Police records, court documents, utility payments—even basic city services went offline. Screens showed the same message: pay the ransom, "lose your data." The demand was around $50,000. The city refused. But the damage? Over $17 million in recovery costs. For weeks, employees had to work on paper, manual processes, old-school methods, just to keep things running. Investigators later confirmed— this wasn't some elite hacking operation. It was preventable. A weak password, no proper security layers— that's all it took. And it exposed something critical: in a world run by digital systems, the smallest weakness can shut down an entire city.