The city of Lewiston, in north central Idaho, has a population of around 32,000 and an information systems budget of around $800,000 a year.
But it wasn’t too small for attackers. For example, the city council meetings, streamed online, were being watched by people in Russia.
“Why are they watching this?” said Danny Santiago, the city’s information systems administrator.
Then there were the phishing attempts.
“We are negotiating a $2 million contract for road work, and we had spearphishing attacks,” he said. “Luckily it’s a small town, and everyone knows everyone, so people called us.”