Florida Center for Government Accountability
Florida Center for Government Accountability DDoS incident
Summary
A July 13, 2025 denial-of-service attack caused minor disruptions to the Florida Center for Government Accountability and Florida Trident websites. Defensive work kept them largely functional; attacker identity and motive remain unconfirmed.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted location
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Distributed denial of service (DDoS)
Intentional disruption of services through overwhelming network traffic.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Degraded service
Services remained available but with reduced performance, reliability, functionality, capacity, or responsiveness.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
The Florida Center for Government Accountability experienced a denial-of-service attack on July 13, 2025, affecting its website and that of its Florida Trident publication. In WGCU’s July 14 account, the publisher acknowledged minor disruptions and continuing attempts being deflected by technical staff.
Operational significance
Our reporting described defensive work that kept the sites largely functional. The incident therefore represents a limited degradation of online publishing services and a substantial response burden, rather than a documented prolonged shutdown.
A small newsroom depends on its websites to distribute reporting. Maintaining access during an attack can still require work that diverts scarce technical resources; the reviewed reporting describes two technicians working eight hours, without establishing the total cost or an equivalent period of website downtime.
Confidence and uncertainty
Confidence is high in the cyber assessment because the affected publisher described the denial-of-service event and its operational consequences. No responsible actor is identified. The publisher suggested the attack sought to suppress investigative reporting, but that motive is an attributed assessment and does not establish responsibility by any person covered in its journalism.
The reviewed evidence does not establish ransomware, theft of information or an extortion demand. Reported connection-attempt figures have not been independently checked against traffic logs and do not measure the number of affected readers.
Analytic gaps
There is no verified final cessation or restoration timestamp, detailed traffic analysis, confirmed attacker identity or quantified financial loss. The July 14 report distinguishes continuing attack attempts from disruptions already limited by mitigation.
Operational disruption is presumed resolved because of the elapsed time. No end date is assigned, and the continued availability of today’s websites is not treated as proof of when the 2025 incident ended.
Organizations involved
Impacted location
Sarasota, Florida
Sarasota is the publisher’s reported base and public mailing-address city. This is a place anchor for the affected organization, not evidence of server location, damage to an office or citywide disruption.
Sources
Our report describes a July13 denial-of-service attack against the Florida Center for Government Accountability and its Florida Trident publication. Defensive work limited disruption, although technical staff spent hours responding.
CEO and publisher Barbara A. Petersen said a denial-of-service attack caused minor disruptions to flcga.org and floridatrident.org. She said contractors were deflecting continuing attempts and that two technicians worked eight hours responding.
See something that needs correction?
Signed-in members can report an error, update, or missing source.