City of Mentor
City of Mentor Cyberattack
Summary
Mentor, Ohio, reported a cyberattack on Oct. 24, 2025, that affected administrative phone lines and some online services. The city took hosted servers offline while restoring systems. Emergency dispatch remained operational. A Nov. 6 update said the Mentor Channel’s digital streams had been restored.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Phone service disruption
Telephone, voice-over-IP, call-center, or related voice communication services were unavailable or materially impaired.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
The City of Mentor confirmed a cyberattack on Oct. 24, 2025. It took hosted servers offline as a precaution and began restoring integrated systems. The city’s account supports a confirmed cyber incident and a partial municipal service disruption; it does not identify the intrusion method or a threat actor. DysruptionHub reported the event that day.
Operational impact
General service phone lines were initially affected. Administrative lines for the police department and municipal court were still scheduled for restoration by Oct. 27. The city warned that some online services might be unavailable and requests requiring data access could be delayed. The city said 911 and nonemergency dispatch were unaffected and essential services continued. These effects are confined to the city systems described; they do not establish a citywide public safety outage.
Recovery and uncertainty
A city meeting notice published Nov. 1 said Mentor Channel digital streams had been restored in time for the Nov. 3 council meeting. A Nov. 6 city update repeated that the streams were available. The reviewed notices do not provide a final restoration date for every affected system. The Oct. 24 notice said there was then no indication that private information had been compromised or released, but it did not report a completed forensic finding. No reviewed source identifies ransomware, data theft, a ransom demand or an initial access vector.
Organizations involved
Impacted location
Mentor, Ohio
Geographic remit of the affected city government; does not assert every resident or city facility had an outage.
Physical place anchor for the affected city government; no separate facility-specific impact is asserted.
Sources
DysruptionHub reported city phone line disruption, hosted server shutdown and restoration, while noting 911 and dispatch remained in service.
The city said it experienced a cyberattack, took hosted servers offline, initially lost general service phone lines and anticipated some online service and data-access delays.
The city’s council meeting notice said the Mentor Channel digital streams had been restored following the late-October cyber event and that the Nov. 3 meeting would be broadcast.
The city said digital streams for the Mentor Channel had been restored after the late-October cyber event.
See something that needs correction?
Signed-in members can report an error, update, or missing source.