Ransomware Attack Shuts Down DuPage County, Illinois Court and Sheriff Systems
A ransomware attack early Monday morning disrupted critical IT systems at the DuPage County Sheriff's Office, the 18th Judicial Circuit Court, and the Circuit Court Clerk’s Office in Wheaton, Illinois. The incident, first detected around 2:30 a.m. on April 28, 2025, forced officials to take affected systems offline while assessing the full scope of the breach. A ransom note viewed by the Daily Herald claimed that attackers had stolen files, including financial records and lawsuits, and demanded an undisclosed payment for decryption keys. The FBI and U.S. Secret Service have been notified and are investigating the incident.
Despite the cyberattack, in-person court operations continued with minimal disruption, though online services such as Zoom hearings were suspended. Some legal proceedings reverted to manual processes, including handwritten court orders. Chancery sales, including foreclosures, were canceled for the week. Officials confirmed that jail operations and public safety services remained unaffected. The county has not disclosed the identity of the attackers or whether any ransom will be paid.