Acworth, Georgia, said systems were restored after a June 8 cybersecurity incident that followed a same-day warning of possible service interruptions from network outages.
The city’s notices left unclear which public-facing services were affected, how long interruptions lasted and whether payments, permits, utilities, records, phones or other systems were disrupted. Acworth is a Cobb County city with 22,440 residents in the 2020 census.
Acworth’s first public notice came the morning of June 8, when the city told customers they “may be experiencing service interruptions due to network outages.” The notice was published at 8:36 a.m. and referred to an 8 a.m. update.

Ten days later, the city said it had identified a cybersecurity incident that occurred June 8 and affected “certain computer systems.” The city said it took immediate response steps, engaged cybersecurity professionals and notified law enforcement.
“Since the investigation is ongoing, the City is not able to share additional details at this time,” officials said.

The city’s June 18 statement said, “City services are fully operational. All systems have been restored, and there is no impact to day-to-day operations.” The update came after the June 8 notice warning customers of possible service interruptions tied to network outages.
The city has not publicly confirmed ransomware, data theft, a ransom demand or a threat actor. It also has not identified the affected departments, systems or services, and had not responded to a request for comment by publication time.
The Acworth incident followed two other Cobb County government-related cyber disruptions. Cobb County government confirmed a March 2025 ransomware attack that took court records, Wi-Fi and jail databases offline for several days, while Marietta said in February that a ransomware attack on payment vendor BridgePay Network Solutions disrupted some online credit card payments for business licenses. Marietta said its own systems and data were not compromised.
Acworth says services are restored, but the cause, duration of customer interruptions, data exposure and law enforcement findings remain unclear.