Crawford Heritage Community Foundation
Crawford Gives denial-of-service attack
Summary
A denial-of-service attack interrupted the Crawford Gives donation platform on Aug. 12, 2025. Donations resumed after technical mitigation, and the foundation said donor information was not compromised; the exact total interruption duration remains uncertain.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Alternate service channel required
The organization redirected users to a different website, office, telephone number, email address, provider, or service channel.
-
Degraded service
Services remained available but with reduced performance, reliability, functionality, capacity, or responsiveness.
-
Intermittent service disruption
Services or systems experienced recurring, unstable, or temporary periods of unavailability.
-
Website unavailable
A public-facing website was unavailable, disabled, or inaccessible.
-
Transaction processing disruption
Business, financial, customer, administrative, or operational transactions could not be completed normally.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
A denial-of-service attack interrupted Crawford Gives on Aug. 12, 2025, during the charitable-giving event operated by Crawford Heritage Community Foundation in Pennsylvania.
Analyst assessment
The program’s official attack update and a statement signed by foundation Executive Director Christian Maher identify denial of service as the cause of intermittent website outages. The statements establish malicious disruption of online charitable giving; they do not identify an attacker or establish that the traffic came from a distributed network.
Operational significance
Donors could not use the donation website reliably. The foundation said its service provider was working on mitigation and offered to email check contribution forms as an interim way to give. The program reported the site back online at 5:44 p.m. on Aug. 12 while warning that the attack continued and processing could slow.
The initial local report described an early 26-minute outage. A follow-up on Aug. 13 reported an attack beginning around 4 p.m., about two hours of downtime and further intermittent failures. It described repeated restarts and IP blocking, with the site at about 95% capacity and donations available again. These observations do not establish one continuous outage or its total duration.
Confidence and uncertainty
Cyber involvement and disruption are supported by the operator’s public statements. Maher said donor data was not compromised and payment cards were processed separately by a third party. That assurance is attributed to the foundation; the reviewed sources do not provide independent forensic findings. No reviewed source establishes ransomware, a ransom demand or an attacker identity. The historical status remains presumed resolved because donations resumed, with the precise end date unknown.
Analytic gaps
The remaining gaps include the traffic’s origin, the complete sequence of outages, final restoration and any donations lost or delayed. The Aug. 15 giving deadline is not evidence of when the attack ended.
Organizations involved
Crawford Gives
Locations
Organization type
Impacted locations
Crawford County, Pennsylvania
Crawford County contains the foundation’s Meadville office, from which it administers Crawford Gives. This physical office anchor does not establish a countywide outage or compromise of participating charities’ systems.
Meadville, Pennsylvania
Meadville is the administrative base of the foundation operating the disrupted Crawford Gives donation platform.
Sources
Crawford Gives reported intermittent website outages and offered check-contribution forms as an alternative way to donate.
The site was back online, but the continuing attack could still slow donation processing.
Donations resumed after repeated restarts and IP blocking, although intermittent outages complicated the recovery timeline.
The foundation offered check-contribution forms while its provider worked on the donation website’s intermittent outages.
See something that needs correction?
Signed-in members can report an error, update, or missing source.