City of Glens Falls
Glens Falls municipal-network cybersecurity incident
Summary
Glens Falls disabled selected online connections and electronic services during a municipal-network cybersecurity response in August 2025. Offices and essential services remained open, and the city later confirmed completed restoration without naming an attacker or describing data theft.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Online portal unavailable
A public, customer, employee, student, patient, vendor, or partner portal was unavailable or materially impaired.
-
Government services disrupted
Public administrative, licensing, permitting, court, tax, records, benefits, or other government services were materially affected.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
Glens Falls, New York, experienced a municipal-network cybersecurity incident in August 2025. We reported the response Aug. 25. The city’s archived primary notice, dated Aug. 25 and posted online Aug. 27, said its outside IT provider identified and contained an event detected during the previous week.
The public account does not establish an exact intrusion or detection day. Identification and containment did not mean restoration was already complete.
Operational significance
The city notice said selected connections and electronic services were proactively disabled while staff restored systems and public access. This caused limited disruption to online access even though City Hall and other offices remained open.
Essential services, 911 operations and emergency communications continued normally. The evidence does not establish a loss of emergency response, municipal water operations or all city services.
An Oct. 17 announcement said online services were available at the city’s new government website. The Oct. 29 resolution statement subsequently confirmed that restoration was completed.
These notices establish recovery milestones. They do not show that every affected connection remained unavailable continuously from August until October.
Confidence and uncertainty
Confidence is high in a cyber incident and limited online-service disruption because the affected city acknowledged both. Its later statement that core and essential services were unaffected is consistent with the earlier notice of selected electronic-service shutdowns.
The reviewed statements do not identify an attacker, confirm ransomware or describe data theft. Those questions remain unresolved. The separate Oracle Health/Cerner incident involving Glens Falls Hospital is not evidence about the city government’s network.
Analytic gaps
The entry method, affected applications and portals, exact interruption durations, complete internal-system scope, data findings and response cost remain unestablished. Requests for information about the event in later council minutes do not by themselves establish continuing system disruption.
Operations are resolved based on the city’s explicit Oct. 29 confirmation of completed restoration. The latest precise public notice describing ongoing restoration and potentially unavailable services is Aug. 27. The exact technical completion day remains unknown. The resolution announcement does not restart the disruption clock.
Organizations involved
Impacted location
Glens Falls, New York
Glens Falls is the municipality containing the affected city government’s offices and network administration. This site anchor is separate from governmental service reach; the city said offices and emergency communications remained operational.
The city’s jurisdiction supplies the governmental service-area context for disabled municipal online access. This does not assert that every city service, household connection or emergency function was interrupted.
Sources
Our report described disabled municipal online connections and portals while offices, essential services and emergency communications continued.
The city said its IT provider identified and contained a network cybersecurity event, proactively disabled connections and electronic services, and was restoring systems and public access.
The city announced its website moved to cityofglensfallsny.gov on Oct. 15 and that online services were available at the new address.
The city announced successful resolution of the late-August event and completed restoration, while stating that core and essential services had not been disrupted.
See something that needs correction?
Signed-in members can report an error, update, or missing source.