Cybersecurity Incident Report: WannaCry Ransomware

Venue: CCSC Central Plains 2026 · Student Posters session
Presented: 11 April 2026 · Drury University, Springfield, MO (program)
Institution: Saint Louis University
Abstract: ccsc.org/centralplains/2026/talks/talk-G8

An incident analysis of the May 2017 WannaCry outbreak, examined through a threat intelligence lens.

WannaCry exploited EternalBlue, a vulnerability in Microsoft’s SMB protocol, to propagate without user interaction, worm behavior that let it spread globally within hours. The operational impact fell hardest on critical infrastructure: hospitals cancelled surgeries, and total losses were estimated in the billions.

The report covers the technical and operational factors behind the outbreak, the mitigation and remediation strategies available at the time, the residual risks organizations still carry, and executive-level recommendations for ransomware resilience.