Calvert County Government
Calvert County emergency alert system compromise
Summary
Calvert County said an unauthorized message with a cryptocurrency investment link was sent through its Everbridge-operated Calvert County Alert system Oct. 29, 2025, reaching 12,409 subscribers. Officials disabled the platform and investigated the vendor-managed account. No later restoration time or data compromise was established in the reviewed sources.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
Incident characteristics
Assessments
Operational impacts
-
Internal systems unavailable
Internal business, administrative, operational, or staff-facing systems were unavailable.
Incident narrative
Analyst assessment
Calvert County said an unauthorized message containing a cryptocurrency investment link was sent through its Everbridge emergency-notification platform Oct. 29, 2025. DysruptionHub reported that the message reached 12,409 subscribers. The county said the issue arose in a vendor-managed environment, the affected account had been secured and disabled, and the sheriff’s office and county Technology Services were investigating. The original Facebook post is now unavailable directly; the contemporaneous article preserves the county’s account. The precise access method and whether a vendor account was compromised remain unverified.
Operational significance
The county temporarily took Calvert County Alert offline during its security review. This is the county’s opt-in emergency and public-safety notification service, not the federal Emergency Alert System. No evidence was found that 911, emergency dispatch or another county service was interrupted. The countywide overlay represents the notification service’s reach, not a countywide communications outage.
Current status and gaps
The county reported no direct safety threat and urged recipients not to follow the link or enter personal information. A later restoration time, subscriber data access, and any downstream compromise from the phishing message were not established in reviewed material. The platform outage is presumed resolved because no continuing interruption was found more than 30 days later; that is not an official all-clear.
Organizations involved
Impacted locations
Calvert County, Maryland
Countywide alert-service remit, not an assertion of countywide outage of other services.
Prince Frederick, Maryland
County public-safety office place anchor; vendor-managed alert service may be hosted elsewhere.
Sources
Unauthorized message with a cryptocurrency link reached 12,409 subscribers; county disabled its Everbridge alert platform.
County reported an unauthorized Everbridge alert to 12,409 subscribers and temporarily disabled the platform during review.
Calvert County Alert sends emergency and public-safety notices to county residents.
County page identifies Calvert County Alert and its county public-safety office in Prince Frederick.
See something that needs correction?
Signed-in members can report an error, update, or missing source.