The city of Wichita, Kansas, found itself grappling with a significant cybersecurity crisis following a disruptive cyberattack attributed to the LockBit ransomware gang. The attack came to light on May 5th followed by swift action by the threat actors to add Wichita to their extortion portal just three (3) days later on May 8th, only a few hours after international law enforcement operations publicly named and sanctioned Dmitry Yuryevich Khoroshev, alias “LockBitSupp,” as the leader of the LockBit operation. The attackers encrypted parts of the city’s network, prompting authorities to shut down various IT systems. These systems facilitated critical online services, including payment portals for court fines, water bills, and public transportation, significantly impacting the city’s operations and its nearly 400,000 residents. In response to the attack, Wichita’s IT specialists took immediate action by shutting down affected computers to contain the damage and prevent further spreading. Additional ramifications extended beyond the immediate disruption of online services. Key public amenities and services, including public Wi-Fi, library systems, and certain public safety services, were forced to revert to manual operations or halt entirely. Electronic payment systems were also compromised, requiring the city’s residents to make payments in cash or by check. This situation also affected public service facilities like golf courses, parks, and courts, as well as essential city functions like the Wichita Transit buses and landfill services. Per the LockBit extortion portal, the city has until May 15th to pay an undisclosed ransom before the stolen files are published.