Commissioners used opioid-settlement proceeds to buy cryptocurrency; the county has not disclosed whether access has been restored, what data was stolen or who carried out the attack.
The association restored card payments at its general store, but its service center remained closed through Sunday without a broader network all-clear.
OMA said ransomware affected two employee computers July 15, but access was restored that morning and it found no evidence that data or client records were compromised.
The tribe is using temporary phone lines for health care, education, transit and social services while outside experts investigate and restore systems.