Brown County
Brown County network intrusion disrupts offices
Summary
A reported network intrusion disrupted Brown County, Indiana, government internet access, prompted early office closures and limited services in October 2024.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unauthorized access
Unauthorized access to systems, accounts, networks, or data.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Network outage
Internal or external network connectivity was unavailable or materially impaired.
-
Internet access disruption
The organization lost or materially restricted internet connectivity.
-
Government services disrupted
Public administrative, licensing, permitting, court, tax, records, benefits, or other government services were materially affected.
-
Facility closure
One or more offices, schools, clinics, stores, plants, branches, or other facilities closed because of the incident.
-
Delayed opening or early closure
The organization delayed opening, closed early, or reduced operating hours because of the incident.
-
Staff unable to work normally
Employees or contractors were unable to perform normal duties because systems, data, facilities, or communications were unavailable.
-
Customer or public access restricted
Customers, residents, patients, students, vendors, or members of the public faced access restrictions or could not use services normally.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
Brown County, Indiana, government offices experienced an internet outage that prompted early closures and limited public services beginning Oct. 23, 2024. DysruptionHub reported Oct. 27 that the problem had subsequently been identified as a network intrusion on Oct. 26.
Operational significance
The report described restrictions at county offices, including the courthouse, and advised residents to call ahead because some services remained offline. These effects support an operationally disruptive incident rather than a data-breach-only record.
The same account said the judiciary, health department and 911 services continued operating. The record therefore does not establish a shutdown of judicial proceedings, emergency communications or health services. The county’s internet provider was not implicated, and the reviewed reporting did not identify effects beyond county government networks.
Confidence and uncertainty
Confidence is medium in the documented intrusion and service disruption. The available incident account explicitly identifies a network intrusion, but the underlying local newspaper report and an original county cyber acknowledgment have not been independently verified in this research pass.
The evidence does not establish ransomware, a responsible actor, an entry method, stolen information or extortion. Bounded ransomware-claim searches produced no matching entry; that result does not prove that ransomware was absent.
Analytic gaps
The incident is presumed resolved, but no defensible date of full restoration has been established. The latest reviewed incident report, published Oct. 27, described continuing service limitations. Subsequent commissioner minutes reviewed from November and December did not provide an explicit recovery milestone.
The scope of affected applications, the intrusion’s actual start, any data consequences and the final restoration date remain unresolved. The Oct. 23 onset describes the reported operational disruption, not a forensically established first compromise.
Organizations involved
Impacted locations
Brown County, Indiana
The county remit is paired with the affected county government, grounded in its official administrative identity and the Ghost report of interruptions at multiple county offices. It does not establish a universal countywide outage, shutdown of every department, compromise of the commercial internet provider or separate health, judicial or 911 disruption.
Nashville, Indiana
Nashville contains affected county offices. The existing town place is retained and the legacy role is normalized to an operating site. The official county homepage and Council page independently establish the administrative address at 201 Locust Lane. The Ghost driver reports office closures and service access limits, not a townwide outage or compromise of Nashville municipal government.
Source
County government internet disruption caused early closures and limited services; the report subsequently described a network intrusion while judiciary, health and 911 continued operating.
See something that needs correction?
Signed-in members can report an error, update, or missing source.