Syracuse Police Department
Syracuse Police Department cyber incident
Summary
Syracuse Police detected a security incident Jan. 11, 2025, and shut down computer systems to contain it. Body-camera docking, email and cruiser-report workflows were affected; most systems were nearly restored by Jan. 29. A 2026 city breach letter said files were accessed or acquired without authorization Jan. 10–12 and may have included personal information. Ransomware and actor attribution remain unconfirmed.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Data impacts
-
Unauthorized data access
An unauthorized party accessed or viewed data without evidence that the data was copied, removed, altered, or publicly disclosed.
Operational impacts
-
Internal systems unavailable
Internal business, administrative, operational, or staff-facing systems were unavailable.
Incident narrative
Analyst assessment
Police Chief Joseph Cecile told syracuse.com the Syracuse Police Department detected a security incident Jan. 11, 2025, and shut down its computer system that day to prevent spread. DysruptionHub documented the event in October 2025. Investigators had not identified the access method, ransomware or an actor in the reviewed sources.
Operational significance
The chief said body-camera docking stations, department email, cruiser incident-report filing and supervisors’ approval of those reports were affected. Some systems were disabled as a precaution even if not known to be compromised. Most services were nearly restored by Jan. 29, though a secure server was still being brought online. The city service-area overlay represents the police jurisdiction, not an outage of all city services. No 911 or dispatch interruption was established.
Later data finding
An April 2026 report cites a March 27 city breach letter stating that certain police digital files were accessed or acquired without authorization between Jan. 10 and Jan. 12, 2025. The city sent notice and offered credit monitoring to potentially affected people; one letter said a Social Security number might have been involved. The city did not publicly specify a final affected count or full data inventory in the reviewed material. That later determination supersedes the October article’s contemporaneous uncertainty about data access.
Status and gaps
The operational outage is presumed resolved because systems were largely restored in January 2025 and no later continuing disruption was found. Full restoration date, final data scope, technical cause, actor and ransomware status remain unresolved.
Organizations involved
Impacted location
Syracuse, New York
Police headquarters place anchor; no building-specific damage asserted.
Police jurisdiction, not a citywide municipal outage.
Sources
SPD restricted network access after Jan. 11 detection; most systems nearly restored by Jan. 29; ransomware unconfirmed.
Chief described Jan. 11 system shutdown; body-camera docking, email, cruiser reports and approvals affected.
City letter said police files were accessed or acquired without authorization Jan. 10–12, 2025; potentially affected people received IDX notices.
Official city page establishes Syracuse Police Department jurisdiction and headquarters.
See something that needs correction?
Signed-in members can report an error, update, or missing source.