News for hackers. Stuff that matters.
Re:Queens Public library under ransomware attack e-borrowing... by rustyhancock on Tuesday November 10, 2026 @04:04AM (#50437791)
Unfortunately, QPL has suffered a ransomware incident and currently much of the online access is unavailable
Re:Queens Public library under ransomware attack e-borrowing... by lynx97 on Tuesday November 10, 2026 @04:46AM (#50438046)
I wish the headlines around such things were more honest and would just say the truth: "$company is currently offline because we never really invested in security and thought we could just wing it"
Re:Queens Public library under ransomware attack e-borrowing... by reaperducer on Tuesday November 10, 2026 @04:52AM (#50438096)
I wish the headlines around such things were more honest and would just say the truth: "$company is currently offline because we never really invested in security and thought we could just wing it"

Yes, because public libraries are well known for being awash in spare cash and never ever operate on a shoestring budget.

Re:Queens Public library under ransomware attack e-borrowing... by 28304283409234 on Tuesday November 10, 2026 @04:59AM (#50438134)
Exactly. No sarcasm. Public services should stop hiding the pain. People voted for this. They should carry the pain. In this case the QPL should have said decades ago: “we cannot offer these services in a secure manner on this budget, therefor we will stop offering our services.” Instead they choose to “wing it”.
Re:Queens Public library under ransomware attack e-borrowing... by matwood on Tuesday November 10, 2026 @05:37AM (#50438408)
It should be noted that the NY library system (NYPL, QPL, BPL) are some of the most well funded libraries in the world, and they still have issues like this. Smaller libraries have no chance.
Re:Queens Public library under ransomware attack e-borrowing... by compsciphd on Tuesday November 10, 2026 @06:18AM (#50438738)
I'm unconvinced this is true.

Most of what libraries do technologically is now outsourced to SAAS companies that specialize in the library space (there are at least 2 major one in the US, and I think at least 3 or 4). (encore and bibliocommons are the 2 major ones that I remembered and am pretty sure I've seen at least 2 others).

If everything you are doing is in the cloud, I'd argue that recovering from a ransomware attack is more of a question of if the SAAS company did its job right (which it should be more capable of handling). Of course, that's a reasonable question if they did (similarly why I prefer paying with paypal or google or even (as not so common) amazon third party payment systems than a retailers own internal payment system, yeah they might screw up too, but they invest a lot more into not screwing it up).

Re:Queens Public library under ransomware attack e-borrowing... by tweetle_beetle on Tuesday November 10, 2026 @06:42AM (#50438927)
There's a good list illustrating the market at https://librarytechnology.org//products/

I've noticed Spydus seems to have a big marketshare in the UK.

Re:Queens Public library under ransomware attack e-borrowing... by xp84 on Tuesday November 10, 2026 @10:04AM (#50441400)
The data is probably is somewhat safe in the cloud. I expect what’s infected is a bunch of PC clients locally. The logical thing that could have happened is someone with an admin level of access on the Windows domain opened an attachment or got phished, and that allowed the ransomware to deploy to all the on-prem systems. Unless they have customized the ransomware to do anything special for this particular library software, it may be not all that bad in terms of data at risk. Though it’s possible the human attackers received cloud software credentials, and could have used that to exported patron data to threaten to leak.
Re:Queens Public library under ransomware attack e-borrowing... by soco on Tuesday November 10, 2026 @05:37AM (#50438411)
And they would risk being completely shut down, I assume. Is that a better option? I'm not even talking about the livelihood of the librarians, but about the loss of the public service.
Re:Queens Public library under ransomware attack e-borrowing... by lynx97 on Wednesday November 11, 2026 @02:04AM (#50450496)
As long as they are digitally storing/processing PII, I would say yes. If they can't reasonably guarantee the security of such information, they should simply shut down their online presence.
Re:Queens Public library under ransomware attack e-borrowing... by UpsideDownRide on Tuesday November 10, 2026 @05:46AM (#50438472)
Winging it and making do with what you can is still probably a great deal for the public. Assuming that something shouldn't be done if it can't be done very well is an interesting position to take.
Re:Queens Public library under ransomware attack e-borrowing... by typicaldev on Tuesday November 10, 2026 @06:05AM (#50438619)
Typical developer response: if you can’t do X 100% properly you shouldn’t be doing it.

Sure, let’s close down all libraries and all public services for that matter. Let the public feel the pain. They will understand and vote better next time, right?

You think it is lack of information that got people to vote for this nonsense?

Re:Queens Public library under ransomware attack e-borrowing... by dspillett on Tuesday November 10, 2026 @06:17AM (#50438727)
Closing things down is the argument taken to a logical extreme. Could they function without collecting that much PII though? If you can't do it right, don't do it, is far more reasonable when limited to just the collection of PII or other potentially sensitive information. Some identifying data might be absolutely required of course, but the great many cases like this show that collecting the absolute minimum must become the default choice.
Re:Queens Public library under ransomware attack e-borrowing... by lynx97 on Tuesday November 10, 2026 @06:24AM (#50438788)
If you leave your car unlocked and police detects that, they can confiscate your keys and probably even fine you after you collected them. The same principle applies to everything. To a certain extend, it is your duty to secure things. Just putting a sign there "please dont fuck with me" isn't enough these days.
Re:Queens Public library under ransomware attack e-borrowing... by dspillett on Tuesday November 10, 2026 @06:24AM (#50438791)
What if the budget is cut so harshly that there is no budget for someone who might potentially notice the problem (and fix it before it is exploited, or make the “we have to stop” decision) at all? The problem becomes undetectable until exploited, so you can't proactively shut things down.

Your assumption that enough people would change their vote (or non-vote if they didn't turn out previously) based on this to make a difference, I think is unlikely to be correct. People complain a lot about public services when they don't work well, but seldom consider (or do but seldom prioritise them) them at the ballot box.

Re:Queens Public library under ransomware attack e-borrowing... by 28304283409234 on Tuesday November 10, 2026 @11:49AM (#50442898)
Well, i am basing this on 25+ years of being sysadmin at governmental organisations where most of my colleagues never learned the password to the next level. The password being “no”. Instead they always (alway!) hide the pain so the management layers above know nothing. If they were ever interested. By showing the pain we may actually get them interested. We tried hiding it. Didnt work. Lets try something different.
Re:Queens Public library under ransomware attack e-borrowing... by lynx97 on Wednesday November 11, 2026 @02:01AM (#50450475)
> People complain a lot about public services when they don't work well

It is their right to "complain" since they pay for these services with their tax money.

Re:Queens Public library under ransomware attack e-borrowing... by xtiansimon on Tuesday November 10, 2026 @07:25AM (#50439339)
That's the yardstick we use for corporations who put profit before safety, and you want use it with government services. Good luck with that.
Re:Queens Public library under ransomware attack e-borrowing... by cush on Tuesday November 10, 2026 @09:22AM (#50440810)
Was it really so bad the last time you visited a Queens Public Library?
Re:Queens Public library under ransomware attack e-borrowing... by p-e-w on Tuesday November 10, 2026 @05:45AM (#50438469)
That’s not an excuse. They chose to operate an online service, one that collects personal information. That entails the responsibility to secure it. If they can’t do that, they shouldn’t have offered the service.
Re:Queens Public library under ransomware attack e-borrowing... by piker on Tuesday November 10, 2026 @05:51AM (#50438505)
Sort of a "she was asking for it" kind of situation, I take it?
Re:Queens Public library under ransomware attack e-borrowing... by p-e-w on Tuesday November 10, 2026 @05:57AM (#50438551)
If you process personal data, you must secure it against attacks. Are you suggesting that they could just put the addresses of their customers on their website with a warning not to download them, and if someone downloaded them anyway then it would be the fault of that person that they were leaked?
Re:Queens Public library under ransomware attack e-borrowing... by gusgus01 on Tuesday November 10, 2026 @06:12AM (#50438677)
According to this logic, anyone using PHP should also not be processing personal data, and of course Java, and also Javascript, and any other language that has had a huge zero-day. In NYS, your name is considered personal data, so these libraries should not have any digital collection of the names of their members let alone any online services. Although, I'd prefer we start with Meta, Amazon, Alphabet, Apple, etc when it comes to making them lose the right to storing all personal data every time they have a vulnerability.
Re:Queens Public library under ransomware attack e-borrowing... by dspillett on Tuesday November 10, 2026 @06:30AM (#50438834)
There is a difference between being hit by the exploit of a zero-day and being hit by the exploit of something (incorrect security implementations) that has been known to be incorrect for years, decades even. The zero-day in PHP is not your fault (unless perhaps you wrote or maintain that bit of PHP) but bad security implementation using PHP (silly example: not bothering to hash password because it is easier and allows you to allow for typos which is convenient for the user) is ultimately the organisations fault.
Re:Queens Public library under ransomware attack e-borrowing... by SkyBelow on Tuesday November 10, 2026 @07:08AM (#50439167)
Society hold a strong double standard when it comes to the notion of blame in criminal acts. In some cases, it is fully put on the criminal. In other cases, it is put on victims of the criminal. While each case can use logic to try to defend it, they are different standards not used consistently. Trying to call out this double standard is a sort of act of profaning the current social norm and not appreciated by most, no different than trying to attack the dominant moral system 500 or 1000 years ago for inconsistencies.

If we were being consistent, then to your later question, yes. But pointing this out is picking at society's reverse scale.

Re:Queens Public library under ransomware attack e-borrowing... by dspillett on Tuesday November 10, 2026 @06:07AM (#50438633)
Not really. The victim here is the people whose information has been distributed, not the system (and the people running it) the information was exfiltrated from.

If we are going to use an SA analogy, this is closer to the recent case of a hotel chain where there were several instances of staff giving “randoms” keys to rooms that they should not have. Best practise procedures were not being followed, the ne'er-do-wells took advantage of this, someone else suffered as a result.

Re:Queens Public library under ransomware attack e-borrowing... by Steve16384 on Tuesday November 10, 2026 @06:06AM (#50438630)
Can any online service guarantee security?
Re:Queens Public library under ransomware attack e-borrowing... by p-e-w on Tuesday November 10, 2026 @06:21AM (#50438769)
The relevant part isn’t whether they can guarantee security, it’s whether they followed best practices in attempting to ensure it.

No restaurant can “guarantee” that you won’t die from eating their food, but that doesn’t mean anything goes in the kitchen.

Re:Queens Public library under ransomware attack e-borrowing... by account42 on Tuesday November 10, 2026 @06:18AM (#50438743)
Or alternatively we could hold criminals responsible and return to a high trust society where you can provide public services without having your own military department.

You are aware that personal information is routinely stored in places that you can break into with a literal brick to smash a window?

Re:Queens Public library under ransomware attack e-borrowing... by p-e-w on Tuesday November 10, 2026 @06:23AM (#50438780)
> Or alternatively we could hold criminals responsible

Ok. Where are the criminals who did this?

Re:Queens Public library under ransomware attack e-borrowing... by Geezus_42 on Tuesday November 10, 2026 @07:10AM (#50439185)
> Somehow its only computers where people turn off their brains and argue that proactive measures need to be 100% effective at blocking all attacks no matter how high the cost.

I don't think I've ever seen anyone say they should be 100% effective. Even those physical locations follow some physical security practices. The difference is that computers can be attacked from literally anywhere in the world, and good luck finding the people who did it.

Re:Queens Public library under ransomware attack e-borrowing... by xp84 on Tuesday November 10, 2026 @10:10AM (#50441497)
But even the best physical security principles really only deter polite criminals. The breach is just as impactful whether someone leaves a door unlocked, or if someone just observes the hour a janitor leaves at night and waits outside the door and clubs him before he can lock up. What difference does it make to those affected by the breach between those two situations?
Re:Queens Public library under ransomware attack e-borrowing... by jonathanstrange on Tuesday November 10, 2026 @06:14AM (#50438694)
That's a naive take, ransomware attacks have been launched in the past against many organizations that spend a lot on security such as the Dodd Group, various airports, healthcare providers, and energy infrastructure. The Ukraine war has shown that virtually nothing is secure against dedicated attacks, all kinds of government sites, satellite communications, and even live TV programming have been attacked successfully by both sides.
Re:Queens Public library under ransomware attack e-borrowing... by rustyhancock on Tuesday November 10, 2026 @07:30AM (#50439392)
Libraries also have a extremely difficult task, they have complex, bespoke/customized older technology backends.

Their systems are largely open to the public, their computer spaces might be the only computer some have access to. There was a time when the advice about a dodgy file was to just open it at the library computer.

Much of their staff might be outreach hires and so limited/no workexperience that might have endured corporate training around information governance or cyber security.

And they do that on a budget where they can't afford shoe strings.

Re:Queens Public library under ransomware attack e-borrowing... by mbac32768 on Tuesday November 10, 2026 @06:35AM (#50438872)
What's the right percentage of its budget a year that a public library should spend on cybersecurity? 10%? More or less?
Re:Queens Public library under ransomware attack e-borrowing... by Geezus_42 on Tuesday November 10, 2026 @07:20AM (#50439289)
If only we could have some kind of jobs program where the government could pay people to fix their crap. A side benefit would be a reduction in unemployment.
Re:Queens Public library under ransomware attack e-borrowing... by mapontosevenths on Tuesday November 10, 2026 @07:45AM (#50439580)
There are no unemployed cybersecurity professionals (who are qualified). There is likely a fraction of a percent who are "Between jobs" and that's about it. It's still very difficult to find and hire qualified candidates, even despite the recent surge in programmers making the leap.
Re:Queens Public library under ransomware attack e-borrowing... by jareklupinski on Tuesday November 10, 2026 @07:17AM (#50439259)
when it is other nation states that are attacking, its up to the nation you are in to defend you. you dont expect costco to defend itself against Spetznaz?

honestly blame Elmo / DOGE for this

Re:Queens Public library under ransomware attack e-borrowing... by ada-h00k on Tuesday November 10, 2026 @07:57AM (#50439688)
You can't really expect a library with hardly any money to do something like that. With companies, however, I would expect them to have a backup of their entire system so that, if something like this happens, they can simply format everything and restore the backup without significant downtime. Ideally, this should be done in a way that isn’t tied to specific hardware. Then they can simply store the backup with AWS or a similar provider and, if necessary, activate the server and continue working from there.
Re:Queens Public library under ransomware attack e-borrowing... by RobotToaster on Tuesday November 10, 2026 @04:58AM (#50438130)
That seems a pretty terrible target for ransomware, it's not like public libraries have huge amounts of money.
Re:Queens Public library under ransomware attack e-borrowing... by lxgr on Tuesday November 10, 2026 @05:44AM (#50438463)
Immoral criminals? Now I've seen everything.
Re:Queens Public library under ransomware attack e-borrowing... by account42 on Tuesday November 10, 2026 @06:15AM (#50438712)
The point is that there are surely targets that are better funded and thus more likely to pay out larg sums of money in order to fix things.
Re:Queens Public library under ransomware attack e-borrowing... by lxgr on Tuesday November 10, 2026 @06:23AM (#50438782)
Definitely, but ransomware groups generally have incremental customer acquisition costs/margins that most other industries can only dream of. They'll encrypt first, ask questions/set prices later. The whole process might even be fully automated at this point, "thanks" to cryptocurrencies.

I remember hearing that they do have customer support, though! Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

Re:Queens Public library under ransomware attack e-borrowing... by Geezus_42 on Tuesday November 10, 2026 @06:28AM (#50438819)
I think Darknet Diaries talked about that. I don't remember what episode.
Re:Queens Public library under ransomware attack e-borrowing... by matkoniecz on Tuesday November 10, 2026 @06:58AM (#50439075)
> Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

some groups offer it (not out of goodness: rather on price discrimination grounds)

Re:Queens Public library under ransomware attack e-borrowing... by exogenousdata on Tuesday November 10, 2026 @11:46AM (#50442857)
Many companies now pay for this kind of insurance. So even though the company may not seem like they have the deepest pockets, it's really more about paying the insurance premiums and the insurer pays the ransom.

I recall a colleague whose firm was hit by a ransomware attack. When they reached out to the insurer and sent them the details of the attackers, the first response from the insurance agent was, "Oh good, they are a reputable group. We've worked with them in the past. They will simply take the ransom and return your network/files to you." My colleague was shocked by the nonchalance.

Re:Queens Public library under ransomware attack e-borrowing... by jasomill on Tuesday November 10, 2026 @03:16PM (#50445718)
Ransom insurance seems more like another part of the problem than the solution.
Re:Queens Public library under ransomware attack e-borrowing... by luma on Tuesday November 10, 2026 @02:41PM (#50445263)
Can vouch for customer support, they need you to believe that they can actually unlock things when paid. They'll work with you to run a trial/demo to unlock a handful of files and generally will bend over backwards to make sure the "end user" has enough faith that they will get their data back in order to convince them to send the payment.
Re:Queens Public library under ransomware attack e-borrowing... by tombert on Tuesday November 10, 2026 @10:54AM (#50442150)
Really? Have you seen a man eat his own head? No? So then you haven't seen everything. And neither have I.
Re:Queens Public library under ransomware attack e-borrowing... by tombert on Tuesday November 10, 2026 @07:53PM (#50448458)
Just so that people get the reference: https://youtu.be/sBrAfJs0xR0
Re:Queens Public library under ransomware attack e-borrowing... by hahn-kev on Tuesday November 10, 2026 @06:04AM (#50438604)
Right? Like what are they going to delete? The digital books? Who had what checked out?
Re:Queens Public library under ransomware attack e-borrowing... by redwood on Tuesday November 10, 2026 @06:14AM (#50438700)
Kind of like "erase the debts" from Fight Club? "Haven't returned that digital book? Keep it!"
Re:Queens Public library under ransomware attack e-borrowing... by Geezus_42 on Tuesday November 10, 2026 @06:25AM (#50438796)
I highly doubt it was targeted.
Re:Queens Public library under ransomware attack e-borrowing... by luqtas on Tuesday November 10, 2026 @08:57AM (#50440436)
i bet Sam is getting some e-books /j
Re:Queens Public library under ransomware attack e-borrowing... by no-user on Tuesday November 10, 2026 @09:41AM (#50441075)
lol
Re:Queens Public library under ransomware attack e-borrowing... by rskeens on Tuesday November 10, 2026 @07:15AM (#50439239)
A California nonprofit's computers were once stolen only to be returned by the thieves.

That would also have arguably been more risky of a redemptive act than the right thing to do in this circumstance.

Re:Queens Public library under ransomware attack e-borrowing... by bell-cot on Tuesday November 10, 2026 @11:03AM (#50442247)
Referring to this? https://www.huffpost.com/entry/thieves-apology-note-san-bern...

I am not a crook, but sounds like it was a pretty high-skill thief. So relatively low risk - and catching & punishing that thief mighta been a pretty low priority for everyone from the on-shift cops to the most idealist juror.

Re:Queens Public library under ransomware attack e-borrowing... by rskeens on Tuesday November 10, 2026 @11:26AM (#50442592)
That's the one!
Re:Queens Public library under ransomware attack e-borrowing... by thatsabadlook on Tuesday November 10, 2026 @07:35AM (#50439453)
Agreed. This is just shitty. Libraries are one of the few things holding the world together right now, and no they don't make tons of money...
Re:Queens Public library under ransomware attack e-borrowing... by bell-cot on Tuesday November 10, 2026 @10:50AM (#50442094)
Yeah. But if 0.1% of humans are in the bottom 0.1% for personal morality, and there are more than 8 billion humans on the Earth...
Re:Queens Public library under ransomware attack e-borrowing... by DANmode on Tuesday November 10, 2026 @03:47PM (#50446111)
and nobody spends their own resources or credit holding others accountable…
Re:Queens Public library under ransomware attack e-borrowing... by lelandfe on Tuesday November 10, 2026 @07:53AM (#50439647)
Ailing Mrs. Cas tottered back to her small apartment from the failed book ban, her request to her YottaGPT to find a way to stop the center's library never quite settling in as a memory.

She thought of the tapioca she'd be served for lunch.

Re:Queens Public library under ransomware attack e-borrowing... by beerandt on Tuesday November 10, 2026 @08:15AM (#50439863)
The libraries here have figured out that no one votes against library taxes and have built up a $250 mil slush fund on top of all new facilities and so many unnecessary "services" that they have a full fledged advertising campaign to tell people about these things they didn't even know they need.

They really are looking for a reason to exist in the digital age.

Re:Queens Public library under ransomware attack e-borrowing... by dghlsakjg on Tuesday November 10, 2026 @08:28AM (#50440014)
That sounds awesome!

A beloved public institution, that improves society as a whole, is equally available to all, has enough money to do their mission well offer auxiliary services and to take advantage of PSA programs?

What a treasure.

Re:Queens Public library under ransomware attack e-borrowing... by cattenwallen on Tuesday November 10, 2026 @09:28AM (#50440891)
I have never seen a service the library provided that I didn't think was at least marginally worth throwing some tax cents to provide for free for people that need it. I looked at the NYPL services page https://www.nypl.org/help/services and none of it looked not useful. Were any of them necessary? I mean, probably not in the way nobody needs a library, only that libraries are a fundamentally good service to a community.
Re:Queens Public library under ransomware attack e-borrowing... by xp84 on Tuesday November 10, 2026 @09:52AM (#50441221)
I say this as a government-skeptical conservative: libraries are a great use of taxpayer money. Of all the things that people can vote to tax themselves for, here’s something that everyone can use. It’s great.

Many other uses of tax dollars are handouts for a very small number of people that most of us see no benefit from (and may even have side-effects that make things worse for everybody else).

Re:Queens Public library under ransomware attack e-borrowing... by afavour on Tuesday November 10, 2026 @10:19AM (#50441631)
At this point I wouldn't be surprised if automated AI agents are probing vulnerabilities and following a preset playbook for extortion without any human involvement.
[dead]
Re:Queens Public library under ransomware attack e-borrowing... by sheepjumpmoons on Tuesday November 10, 2026 @07:13AM (#50439221)
Ransomware infections frequently start with a phished user, not a popped web app.
Re:Queens Public library under ransomware attack e-borrowing... by vinnymac on Tuesday November 10, 2026 @08:03AM (#50439740)
Not to mention since a few weeks ago several other CVEs have dropped that would have been just as exploitable. Such as *sshole
Re:Queens Public library under ransomware attack e-borrowing... by redwood on Tuesday November 10, 2026 @06:15AM (#50438708)
Today I learned that Queens has a public library system that predated the consolidated New York City library system and fiercely fought to maintain independence rather than come under the control of a Manhattan-based system
Re:Queens Public library under ransomware attack e-borrowing... by rsstack on Tuesday November 10, 2026 @06:52AM (#50439012)
Brooklyn too. (Bronx and Staten Island being served only by NYPL, the “Manhattan” one)
Re:Queens Public library under ransomware attack e-borrowing... by lelandfe on Tuesday November 10, 2026 @07:16AM (#50439245)
And the consequence of this is that I have to get three different library cards haha.
Re:Queens Public library under ransomware attack e-borrowing... by rsstack on Tuesday November 10, 2026 @07:32AM (#50439417)
Another consequence is that on the Libby app you have better chances to find something available, and each one’s limits are separate!
Re:Queens Public library under ransomware attack e-borrowing... by PLenz on Tuesday November 10, 2026 @07:40AM (#50439506)
The tbree systems in NYC also serve the entire state, not just the city. Any NYS resident can get a card at each. I do and use the e book systems for all at the same time even though I rarely go into the city these days.
Re:Queens Public library under ransomware attack e-borrowing... by mixdup on Tuesday November 10, 2026 @10:08AM (#50441456)
Seems that even as three separate systems, they'd at least just let a card from any of them work at all three. Or issue a single unified card and let that be the only point of commonality between them, if all other operations being independent is important to them

Kind of like how many regions will have a unified transit payment card, even if it covers a half dozen completely independent adjacent transit systems

Re:Queens Public library under ransomware attack e-borrowing... by bsimpson on Tuesday November 10, 2026 @01:53PM (#50444543)
You can also get Buffalo/Erie County.

It seems that NY has a law that allows anyone in the state to be a member at any library in the state, but there's an opt-out if that would put an undue burden on the local system.

In practice, that means anyone in NYS can be a member of any of the NYC libraries + Buffalo. The others have either opted out, require you to visit in person, and/or pay a non-resident fee.

Re:Queens Public library under ransomware attack e-borrowing... by justusthane on Tuesday November 10, 2026 @08:09AM (#50439803)
Additionally, a Queens library card is available to anyone world-wide for $50 annually. I have a membership in Canada to access their digital library.
Re:Queens Public library under ransomware attack e-borrowing... by brendoelfrendo on Tuesday November 10, 2026 @11:52AM (#50442936)
I wish I wasn't learning this information from a comment on this particular story.
Re:Queens Public library under ransomware attack e-borrowing... by brador on Tuesday November 10, 2026 @07:15AM (#50439238)
It’s a library.

Wipe the system and start again.

Re:Queens Public library under ransomware attack e-borrowing... by gosub100 on Tuesday November 10, 2026 @07:26AM (#50439347)
should be simple, restore from backup. right ?
Re:Queens Public library under ransomware attack e-borrowing... by KineticLensman on Tuesday November 10, 2026 @08:52AM (#50440364)
When the British Library was hit by ransomware, some systems were down for months. They were old software that didn't run on the newer more secure systems the library had to migrate to. And there was no funding to rewrite them, not without cutting already affected services.
Re:Queens Public library under ransomware attack e-borrowing... by dotemacs on Tuesday November 10, 2026 @10:26AM (#50441722)
The British Library is still recovering from the 2023 attack, more than three years later... some systems are still not available.
Re:Queens Public library under ransomware attack e-borrowing... by anigbrowl on Tuesday November 10, 2026 @04:06PM (#50446328)
The cost out of the previous administrators' pensions.
Re:Queens Public library under ransomware attack e-borrowing... by criddell on Tuesday November 10, 2026 @10:37AM (#50441874)
[delayed]
Re:Queens Public library under ransomware attack e-borrowing... by WalterBright on Tuesday November 10, 2026 @12:04PM (#50443114)
So the backups are kept online? Crazy. If your backups are connected to the internet, you don't have backups.
Re:Queens Public library under ransomware attack e-borrowing... by criddell on Tuesday November 10, 2026 @12:52PM (#50443683)
[delayed]
Re:Queens Public library under ransomware attack e-borrowing... by waltbosz on Tuesday November 10, 2026 @08:00AM (#50439714)
https://spotlightdelaware.org/2024/09/23/delaware-libraries-...

This happened to my state's library system a while back. Public computers and free wifi were down for a few months, but no major disruptions of lending services. I don't think the state paid any ransom, instead they just repaired their systems.

Re:Queens Public library under ransomware attack e-borrowing... by program_whiz on Tuesday November 10, 2026 @09:11AM (#50440654)
I see a lot of people bemoaning the loss of a public service, but honestly I'm not sure the public library is an important service. At one time, yes, it represented access to knowledge for everyone. For everyone talking about how important this is, I'm curious how many have visited a library in the last 5 years to actually get a book.

Today, it could probably disappear and no one would miss it. There's a reason these places operate on a shoestring budget and haven't bothered to update software security. The services we value, we pay for or vote for. If there was a proposition to close libraries in favor of some other minor benefit (e.g. one extra field trip for every school child per year), it would probably lose badly.

Probably most of the relevant functions of a library can be accomplished by other more efficient means. Student loan forgiveness (librarians), homeless shelters with computers, and free daycare for kids. That's basically what people use it for now, and all can be better done if we just admit what its for and do that instead.

Re:Queens Public library under ransomware attack e-borrowing... by vel0city on Tuesday November 10, 2026 @09:21AM (#50440799)
> For everyone talking about how important this is, I'm curious how many have visited a library in the last 5 years to actually get a book.

At least every other week if not more often. I also use the library digital services a good bit. There's always lots of people at the libraries I go to browsing books, I imagine they're also checking them out.

> it could probably disappear and no one would miss it.

The libraries I go to have so many people using their various services constantly. People studying and reading. Kids playing, exploring and reading. 3D printers buzzing. Classes and events being hosted.

> one extra field trip for every school child per year

You're going to replace something lots of people use across all age ranges constantly with a single day event for only children once a year? Sounds like a terrible loss IMO.

I agree a library is way more than just a place to get books today. They do offer a lot of community center features, and I think modern library designs should cater to that need as well. But they're not homeless shelters, they're not daycares. They still have their own specific use, a general place of learning and knowledge for all people. It's just the way we go about sharing that has evolved a bit over time compared to the stodgy old libraries of the past.

Re:Queens Public library under ransomware attack e-borrowing... by cattenwallen on Tuesday November 10, 2026 @09:33AM (#50440960)
NGL it is crazy to me to declare no one needs a library when a new hardcover book is at least $30. I would be out hundreds of dollars, probably over a thousand a year, if I had to buy new every time I wanted to read some book I heard of and maybe didn't even enjoy (the guilt-free "read 20% decide its not for me" is amazing).
Re:Queens Public library under ransomware attack e-borrowing... by LtWorf on Tuesday November 10, 2026 @09:51AM (#50441194)
Basically most people do not read, and most people here have no social life.

Libraries are for reading and socialising, so many users here have a really really hard time to imagine that someone might have some benefit from them.

Re:Queens Public library under ransomware attack e-borrowing... by cattenwallen on Tuesday November 10, 2026 @10:15AM (#50441574)
Yeah but even if I didn't read, I would want any kids I own/any kids someone else owns to be able to access books, and even middle grade hardcover chapter books can be $30. I can't imagine paying even $10 for every single big flippy book they give the toddlers, that's gotta be at least a hundred a week just for the luxury of reading to the child for bed.
Re:Queens Public library under ransomware attack e-borrowing... by beej71 on Tuesday November 10, 2026 @11:07AM (#50442315)
And that's far from all. Research, tool lending, children's activities, maker spaces, meetup spaces, study areas... My wife ran a sewing meetup at our library a few weeks ago; tons of people showed up with machines and made all kinds of stuff.

A good library is a focal point for a community.

Re:Queens Public library under ransomware attack e-borrowing... by neom on Tuesday November 10, 2026 @09:56AM (#50441279)
https://en.wikipedia.org/wiki/Third_place

Personally, I believe these are important for a functional society more generally.

Re:Queens Public library under ransomware attack e-borrowing... by hgoel on Tuesday November 10, 2026 @10:10AM (#50441499)
Always shocking how willing some Americans are to tear down services that a large portion of the world would envy. Particularly when they can't even be bothered to look up what the service provides to the community.
Re:Queens Public library under ransomware attack e-borrowing... by dieselgate on Tuesday November 10, 2026 @10:54AM (#50442144)
I live a few blocks from a library and work there, borrow movies on dvd and books all the time.
Re:Queens Public library under ransomware attack e-borrowing... by II2II on Tuesday November 10, 2026 @11:00AM (#50442207)
> Probably most of the relevant functions of a library can be accomplished by other more efficient means.

Two points:

Many of those relevant functions were picked up by libraries over the years due to the lack of, or cutbacks to, other government services.

Some people prefer, or can only use, services offered through libraries because they offer them with few, or no, questions asked. That is rarely the case with dedicated services, where funding often has more conditions tied to it.

Re:Queens Public library under ransomware attack e-borrowing... by exogenousdata on Tuesday November 10, 2026 @11:53AM (#50442968)
Just my two cents, I get books from the library all the time.
Re:Queens Public library under ransomware attack e-borrowing... by pessimizer on Tuesday November 10, 2026 @12:11PM (#50443211)
You're getting downvoted to hell for this, I assume the excuse people are giving themselves to do this is that it is mostly irrelevant to the story - but the story is an irrelevant story. The only things interesting about it are incidental.

And your thought was my first thought. It's as if the soup kitchens were shut down because somebody had stolen all of the prayer beads, meaning that none of the homeless could pray before they ate.

Libraries have now simply become official copyright access points. I lived in libraries my entire childhood. I remember in my teens being both depressed and excited that my local library was going to close down for six months to be gutted and remodeled. I was soon the one that was gutted when I found out that after the remodel, the library would have a 20% smaller capacity for books. I had to conclude that the remodel was mostly so it would look better in photographs, people would get kickbacks, and people would get resume-padding.

Libraries have been retconned into necessary public spaces but in that case, the books are just an excuse. Get rid of the excuse and consciously create necessary public spaces. I've literally heard their existence justified by the fact that homeless people clog them up and sleep in them, which has been one of the major reasons for declines in library use imo. Just take care of homeless people.

I'd even rank access to a librarian, especially a research librarian, as of higher value than a building full of books. AI has forced us to take a different approach to intellectual property, whether we're going to consciously do that in the public interest and design systems that will protect the positives that we attribute to copyright, or whether we're going to do that through inaction by allowing the wealthiest people in the world to rent human knowledge back to us without having paid a dime for it.

I'd prefer that we govern, but if we're going to go the passive route of insisting that nothing a rich man does is a crime, we can continue to settle it through piracy. Either way, libraries are cooked.

Re:Queens Public library under ransomware attack e-borrowing... by simtel20 on Tuesday November 10, 2026 @12:58PM (#50443767)
You're aware that this incident includes the inter library loan, so it is depriving citizens in one neighborhood from discovering and reading the millions of books that don't fit into the building locally, and prevents their ebook loans?

Your recollection and what seems like bitterness at the memory of a remodel that may have changed the function of your library to e.g.

Re:Queens Public library under ransomware attack e-borrowing... by cush on Tuesday November 10, 2026 @09:17AM (#50440726)
This happened in seattle a few years ago. Computer systems were down for months. They just let everyone borrow using an honor system.
Re:Queens Public library under ransomware attack e-borrowing... by gregl on Tuesday November 10, 2026 @09:40AM (#50441065)
Re:Queens Public library under ransomware attack e-borrowing... by RRRA on Tuesday November 10, 2026 @11:23AM (#50442540)
Same for the city of Westmount (Montréal island) a few years back (including the library):

https://globalnews.ca/news/9296036/city-of-westmount-target-...

Re:Queens Public library under ransomware attack e-borrowing... by joelanman on Tuesday November 10, 2026 @11:44AM (#50442834)
and the British Library, an attack that took years of recovery which is still not complete

https://en.wikipedia.org/wiki/British_Library_cyberattack

Re:Queens Public library under ransomware attack e-borrowing... by sanjit on Tuesday November 10, 2026 @04:20PM (#50446451)
Re:Queens Public library under ransomware attack e-borrowing... by studog on Tuesday November 10, 2026 @12:10PM (#50443197)
TIL. Good job TPL for not paying.
Re:Queens Public library under ransomware attack e-borrowing... by mcdonje on Tuesday November 10, 2026 @09:26AM (#50440866)
The post headline could use some punctuation.
Re:Queens Public library under ransomware attack e-borrowing... by utopiah on Tuesday November 10, 2026 @10:48AM (#50442053)
So I do support authors being paid fairly for their work, with attribution, yet I do not support DRM.

Since we are talking about e-borrowing I assume DRM are involved. If they are not, ignore the rest.

The point of DRM (ignoring their terrible side effect) is precisely to keep on controlling data even after content has been released. There is a validation mechanism (typically pinging back the digital right owner) to insure that the file can indeed be read. So... do not validate all the signed books already out, issue a new key for the library to "e-borrow" (hate that term) once again. Why is this even taking more than 1min? I don't get it. It feels like once again in theory it could be positive but in practice the negative side effects of DRMs trump out everything.

Re:Queens Public library under ransomware attack e-borrowing... by Forgeties79 on Tuesday November 10, 2026 @11:57AM (#50443032)
Then pay for Libro and let the rest of us enjoy our taxpayer funded resources. I am also against DRM and talk to my library about alternatives. You should do the same!
Re:Queens Public library under ransomware attack e-borrowing... by JasonBorne on Tuesday November 10, 2026 @11:40AM (#50442779)
Despicable to target a place that supports learning and shares public knowledge.
Re:Queens Public library under ransomware attack e-borrowing... by crunkmcgoop on Tuesday November 10, 2026 @12:54PM (#50443699)
Ransomware for what? Just use the honor system. They did us all a favor
Re:Queens Public library under ransomware attack e-borrowing... by hollowonepl on Tuesday November 10, 2026 @01:04PM (#50443864)
Shit… for a second I was worried somebody stole the books and encrypted them on paper… hah! But luckily only website is broken it seems… uff.. most important thing in a library is safe… rest seems so much bollocks as a target… what is wrong with this world?!
Re:Queens Public library under ransomware attack e-borrowing... by bell-cot on Tuesday November 10, 2026 @01:36PM (#50444317)
> ...stole the books and encrypted them on paper...

That explains the Voynich Manuscript, doesn't it?

Re:Queens Public library under ransomware attack e-borrowing... by dofm on Tuesday November 10, 2026 @05:25PM (#50447165)
A public library?

Find these people and make them hurt. Like, really hurt. Make them read Jeffrey Archer books.

Re:Queens Public library under ransomware attack e-borrowing... by happyPersonR on Wednesday November 11, 2026 @01:00AM (#50450165)
I’m seeing a disturbing trend. People doing things and not expecting consequences. The kind of people that would ransomware a library and the other day a food kitchen. Even if the law doesn’t catch up, karma will. Just ain’t right.

Honestly, if someone unplugs their network and wipes all their disks and gives them free servers and sets it up properly I think that’s the move.

But this isn’t a thing.

For this or the food bank the penalty legally should be the highest.