UNOFFICIAL COPY 22 RS BR 117 Page 1 of 2 XXXX Jacketed A RESOLUTION urging Congress to take appropriate steps in mitigating 1 cyberattacks and ransomware demands. 2 WHEREAS, cyberattacks are the result of compromised security, confidentiality, or 3 integrity of computerized data resulting in the unauthorized access of information 4 maintained by business entities, governmental entities, or individuals; and 5 WHEREAS, ransomware is a type of malware designed by cyber hackers to block 6 access to computerized data by encrypting or locking data and extorting ransom payments 7 from victims in exchange for decrypting and restoring data; and 8 WHEREAS, cyberattacks and ransomware attacks are becoming more prevalent as 9 online payment methods and cyber hacking techniques evolve and become more 10 accessible, sophisticated, and focused; and 11 WHEREAS, the average ransom paid by organizations in the United States 12 increased from an estimate of $100,000 dollars in 2019 to $300,000 dollars in 2020; and 13 WHEREAS, the average known ransomware profits in 2021 were about 14 $570,000,000 dollars; and 15 WHEREAS, in 2019, a business fell victim to ransomware attacks every 14 seconds 16 and experts estimate that attacks occurred every 11 seconds in 2021; and 17 WHEREAS, as a result of the COVID-19 pandemic, ransomware payments 18 increased dramatically and hackers focused on industries least likely to be able to deal 19 with operational shut downs, such as schools, healthcare entities, and governmental 20 entities; and 21 WHEREAS, in the likelihood that ransomware attacks continue to increase, 22 business and governmental entities will suffer significant consequences such as financial 23 losses associated with remediation efforts, disrupted business operations, damaged 24 company reputation, disrupted domestic supply chains, business trade secrets and 25 customer information threatened to be compromised, personal and sensitive information 26 threatened to be leaked, and temporary or permanent loss of important data; and 27 UNOFFICIAL COPY 22 RS BR 117 Page 2 of 2 XXXX Jacketed WHEREAS, business entities of all sizes and across all industries are being targeted 1 by ransomware, which will ultimately obstruct interstate commerce and hinder economic 2 growth; and 3 WHEREAS, facilitating a ransomware payment enables criminals and adversaries 4 to profit and ultimately encourages future attacks with no guarantee that the encrypted or 5 locked data will be returned; and 6 WHEREAS, the House of Representatives proclaims its commitment to protect 7 Kentucky businesses across all industries, maintain economic growth, and preserve 8 stability by addressing ransomware at the root of the problem; and 9 WHEREAS, taking preventative measures against cyberattacks is needed in order to 10 properly mitigate the damages from ransomware demands; 11 NOW, THEREFORE, 12 Be it resolved by the House of Representatives of the General Assembly of the 13 Commonwealth of Kentucky: 14 Section 1. The House of Representatives, on behalf of the Commonwealth of 15 Kentucky, supports federal action in mitigating cyberattacks and ransomware demands. 16 Section 2. The House of Representatives, on behalf of the Commonwealth of 17 Kentucky, urges the United States Congress to take appropriate measures sufficient to 18 protect the Commonwealth from cyberattacks and prevent ransomware demands. 19 Section 3. A copy of this Resolution shall be sent by the Clerk of the House of 20 Representatives to the members of Kentucky's Congressional delegation. 21