A cybersecurity incident has disrupted the Kenaitze Indian Tribe’s phones, email and computer systems in Alaska for more than a week, forcing the tribe to use temporary phone lines and limit public services.
The federally recognized tribal government, based in Kenai, has more than 2,100 members and provides health care, education, transit, elder and social services across the Kenai Peninsula.
The tribe first reported July 27 that its internet and phone services were down and that it could not receive calls or email. Later that day, it said it was “mitigating a risk” to its network after a prolonged computer outage. On July 31, it linked the outage to a cybersecurity incident and said it had brought in outside experts.
In an Aug. 5 update, the tribe said scheduled care continued at the Dena’ina Wellness Center using temporary phone lines. Dental patients were asked to verify appointments before arriving. Education, Kahtnu Area Transit and Na’ini Family and Social Services were also using temporary numbers, while Tyotkas Elder Center was serving meals on-site only. The K’beq’ Cultural Heritage Center and Educational Fishery remained available.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
Similar operational disruptions have affected other tribal governments. In Oklahoma, a ransomware attack on the Cheyenne and Arapaho Tribes knocked out phones, email and computers, prompting the tribes to use alternate phone numbers while systems were restored in phases. In Michigan, the Sault Ste. Marie Tribe of Chippewa Indians closed or limited tribal offices and health clinics after ransomware disrupted computer and phone systems.
The tribe said an unknown actor had claimed responsibility and that the claim was part of its investigation. The ransomware-tracking site ransomware.live attributed the incident to a group calling itself TheGentlemen, which claimed it had stolen internal files. DysruptionHub could not review the original post because the group’s site was unavailable at publication time.
The tribe has not confirmed ransomware, data theft or a ransom demand. It also has not disclosed which systems were affected or when normal phone, email and computer services will return. Asked by KDLL for more information, the tribe’s communications manager declined an interview. The tribe also did not respond to DysruptionHub’s request for comment by publication time.
