Commissioners used opioid-settlement proceeds to buy cryptocurrency; the county has not disclosed whether access has been restored, what data was stolen or who carried out the attack.
The company is rebuilding Diligence, Metabase API and Newsdesk in a new environment after isolating the affected systems.
Enjoying Our Work?
A small tip keeps our reporting, hosting, and tools running for everyone.
U.S. Cyber Incident Alerts
Get concise updates on incidents impacting the United States—no spam.
Become a Long-Term Supporter
Your monthly or annual pledge sustains independent coverage and uptime.
Analysis, reports, and opinion that look beyond individual incidents. We examine trends, tactics, and sector-wide risks; connect dots across cases; and publish periodic research and explainers. Expect context, data-driven takeaways, and clear points of view to help readers understand what matters, why it happened, and what to watch next.
All in Analysis
A new research resource for exploring cyber disruptions, following incidents over time, and uncovering the connections between them.
Energy, water and wastewater, transportation, communications, and financial systems that keep communities running. Coverage focuses on outages, service degradation, and operational risk from cyber incidents, sabotage, or vendor failures that disrupt essential services.
All in Critical Infrastructure
The utility switched to manual control after attackers gained remote access July 27; officials said water service, water quality and customer data were unaffected.
Hospitals, clinics, public health agencies, payers, and health IT providers. We track incidents affecting patient care, ER diverts, EHR downtime, and PHI breaches, emphasizing operational impact, restoration status, and what patients and providers need to know.
All in Healthcare
Technology systems remain unavailable across the Fort Worth health network, forcing manual procedures and delaying records responses as the cause remains undisclosed.
Public-facing city and county services other than critical infrastructure: 911/PSAP, EMS and fire, transit, libraries, housing, and social services. We report on outages, call routing issues, payment portals, and case-management systems that limit access to services.
All in Public Services
D.C. Council member Robert White’s office said DCHA described the incident as an active cyberattack and expected landlord payments to go out as scheduled.
Federal, state, local, tribal, and territorial governments. Coverage focuses on operational impact, public notifications, restoration timelines, and risks to civic functions and records.
All in Government
Davison County workers were warned not to open city emails, while Mitchell’s mayor said there was no indication the city’s email environment was affected.
K–12 districts, higher education, and community colleges. We cover closures, remote learning disruptions, SIS and E-Rate impacts, and breaches of student records. Vendor incidents land here when they disrupt teaching, learning, or campus operations.
All in Education
The university took some computer systems offline after reporting a network disruption but has not confirmed the cause or disclosed a recovery timeline.
Companies and nonprofits whose incidents affect customers, supply chains, or communities. Includes MSPs, SaaS, media, retail, manufacturing, logistics, and insurers. Vendor events that disrupt hospitals, schools, or governments are cross-tagged but filed under the impacted sector.
All in Private Sector
Coca-Cola said product safety was unaffected as it suspended U.S. production while responding to a ransomware attack.
