Police Departments' Ransomware Policies (Baltimore Police Department)

Dear Mr. AJ Vicens:

This is an acknowledgement of your request below, for public information, submitted to the Document Compliance Unit ("DCU") of the Baltimore Police Department ("BPD"). Your request is governed by the Maryland Public Information Act ("PIA"), Maryland Code, General Provisions Article ("GP"), Sections 4-101 et seq. DCU will process your request promptly. However, our response may take longer than ten (10) working days, the reasons for which may include the scope of your request, the type and volume of potentially responsive records, and the nature of the search, review, and preparation that is required. In any event, DCU will respond to your request within thirty (30) days. GP § 4-203.

DCU will contact you with the availability of records and the possible costs associated with this request, as soon as the information is made available by the Custodian of Records. Likewise, if DCU and/or the Custodian of Records need you to clarify your request, DCU will contact you promptly.

Please refer to tracking # MPIA 21- 1143 in any subsequent correspondence pertaining to this matter. All follow up correspondence should be made in writing and submitted to the DCU's e-mail: DCU@baltimorepolice.org<mailto:DCU@baltimorepolice.org>.

Please understand that because of COVID-19, the Baltimore Police Department, Document Compliance Unit ("DCU") is working under a state of emergency and mandated to work remotely. DCU will work diligently to respond to your request as quickly as possible. Please note responses to document request may take longer than normal.

Ken Hurst
Contract Specialist
Baltimore Police Department
Office of Legal Affairs
Document Compliance Unit
410-637-8684

CONFIDENTIALITY NOTICE: The information contained in or attached to this e-mail message may be a privileged and confidential attorney/client communication, or otherwise confidential, and is intended only for the use of the individual or entity to whom it is addressed. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are notified that any distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Legal Affairs Division immediately by telephone at 410-396-2496 and DELETE the message from your system immediately.

The materials in this e-mail are private and may contain sensitive law enforcement information. Please note that e-mail is not necessarily confidential or secure. Use of e-mail constitutes your acknowledgment of these confidentiality and security limitations. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited as covered by the Electronic Communications Privacy Act, 18 U.S.C. §§ 2510-2521. If you have received this e-mail in error, please immediately notify the sender via telephone or return e-mail.

Good Morning:

I have checked with the Policies and directive Unit and they do not have a policy for Ransomware. I have contacted the Director of IDT and waiting for him to respond.

Thank you

Ken Hurst
Contract Specialist
Baltimore Police Department
Office of Legal Affairs
Document Compliance Unit
410-637-8684

CONFIDENTIALITY NOTICE: The information contained in or attached to this e-mail message may be a privileged and confidential attorney/client communication, or otherwise confidential, and is intended only for the use of the individual or entity to whom it is addressed. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are notified that any distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Legal Affairs Division immediately by telephone at 410-396-2496 and DELETE the message from your system immediately.

The materials in this e-mail are private and may contain sensitive law enforcement information. Please note that e-mail is not necessarily confidential or secure. Use of e-mail constitutes your acknowledgment of these confidentiality and security limitations. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited as covered by the Electronic Communications Privacy Act, 18 U.S.C. §§ 2510-2521. If you have received this e-mail in error, please immediately notify the sender via telephone or return e-mail.

Good Morning:

IDT is our unit that has the Its that handle all the programs for the computer systems.

Ken Hurst
Contract Specialist
Baltimore Police Department
Office of Legal Affairs
Document Compliance Unit
410-637-8684

CONFIDENTIALITY NOTICE: The information contained in or attached to this e-mail message may be a privileged and confidential attorney/client communication, or otherwise confidential, and is intended only for the use of the individual or entity to whom it is addressed. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are notified that any distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Legal Affairs Division immediately by telephone at 410-396-2496 and DELETE the message from your system immediately.

The materials in this e-mail are private and may contain sensitive law enforcement information. Please note that e-mail is not necessarily confidential or secure. Use of e-mail constitutes your acknowledgment of these confidentiality and security limitations. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited as covered by the Electronic Communications Privacy Act, 18 U.S.C. §§ 2510-2521. If you have received this e-mail in error, please immediately notify the sender via telephone or return e-mail.

Good morning:

Please see below in reference to your request. This is the response I received from the Director.

We don't have a specific policy on handling ransomware or
digital extortion. The city has an incident response plan
which is sensitive and cannot be shared publicly because it
would provide threat actors with the information they could
use to their advantage. The incident response plan follows
industry best practices to assess the incident, contain it,
respond and recover.

Ken Hurst
Contract Specialist
Baltimore Police Department
Office of Legal Affairs
Document Compliance Unit
410-637-8684

CONFIDENTIALITY NOTICE: The information contained in or attached to this e-mail message may be a privileged and confidential attorney/client communication, or otherwise confidential, and is intended only for the use of the individual or entity to whom it is addressed. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are notified that any distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Legal Affairs Division immediately by telephone at 410-396-2496 and DELETE the message from your system immediately.

The materials in this e-mail are private and may contain sensitive law enforcement information. Please note that e-mail is not necessarily confidential or secure. Use of e-mail constitutes your acknowledgment of these confidentiality and security limitations. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited as covered by the Electronic Communications Privacy Act, 18 U.S.C. §§ 2510-2521. If you have received this e-mail in error, please immediately notify the sender via telephone or return e-mail.

Good Morning:

There is nothing else in reference to this request.

Thank you

Ken Hurst
Contract Specialist
Baltimore Police Department
Office of Legal Affairs
Document Compliance Unit
410-637-8684

CONFIDENTIALITY NOTICE: The information contained in or attached to this e-mail message may be a privileged and confidential attorney/client communication, or otherwise confidential, and is intended only for the use of the individual or entity to whom it is addressed. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are notified that any distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Legal Affairs Division immediately by telephone at 410-396-2496 and DELETE the message from your system immediately.

The materials in this e-mail are private and may contain sensitive law enforcement information. Please note that e-mail is not necessarily confidential or secure. Use of e-mail constitutes your acknowledgment of these confidentiality and security limitations. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited as covered by the Electronic Communications Privacy Act, 18 U.S.C. §§ 2510-2521. If you have received this e-mail in error, please immediately notify the sender via telephone or return e-mail.