Prince George County, Virginia, said a cybersecurity incident disrupted certain county network systems beginning June 11, affecting phone, internet and online payment services while 911 and non-emergency dispatch remained available.
The county said the “vast majority” of systems and services have been restored, though recovery continues on a limited number of remaining systems. Prince George County, whose county seat is Prince George, is a southeastern Virginia county in the Richmond metropolitan area with about 43,600 residents.
In a statement provided after DysruptionHub requested comment, Interim County Administrator Kristen D. Pudlow said the county identified a cybersecurity incident affecting certain systems, activated response protocols, engaged external cybersecurity experts to assist with containment, investigation and recovery, and notified law enforcement.
The county’s first public alert reviewed by DysruptionHub said the outage was countywide as of 9 a.m. June 11 and affected county phones and internet lines. A later June 11 post said the outage affected phone and internet service across all county offices, though offices would remain open during regular business hours.
Officials said some services could be delayed or temporarily unavailable. Residents were told to call 911 for urgent assistance or the county’s non-emergency dispatch line for non-emergency police, fire or EMS calls.
The county said residents could still access its website, but online bill pay systems were affected. An alert visible on multiple county pages also said the outage was affecting online payment applications and that staff were working to fix the issue.
In a June 12 social media notice reviewed by DysruptionHub, the county Utilities Department said water and wastewater payments were unavailable during the outage. The department said bills mailed in May with a June 15 due date would not receive late fees until June 30.
RansomHouse, a ransomware extortion group, listed Prince George County on its leak site, claiming the county was “encrypted” on June 10, 2026, and posting an “evidence pack.” DysruptionHub reviewed a screenshot of the listing.
Pudlow said county officials are aware that references to Prince George County have appeared on a website associated with cybercriminal activity. She said it is common for threat actors to make claims during or after cybersecurity incidents and that the county is working with cybersecurity experts and law enforcement to assess and verify information as part of the investigation.
Asked whether the county’s public confirmation was connected to the RansomHouse listing, spokesperson Hannah Thomas said the county’s decision to communicate publicly was based on confirmed information about service impacts and recovery efforts affecting county operations and residents. She said the county remains committed to accuracy, transparency and protecting the integrity of the ongoing investigation.
The county has not confirmed RansomHouse’s encryption claim, data theft or a ransom demand. Pudlow said the county would provide additional information “if and when it can be confirmed.”
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
The county said critical data backups supported the restoration process and played an important role in recovery. Officials said critical county operations remain stable and that they are optimistic the remaining services will be restored soon.
The investigation remains ongoing, and the county said officials continue to work with cybersecurity experts, legal counsel, law enforcement and other partners as part of the recovery process.
The county said it expects to provide future updates only as significant developments occur or additional services are restored.
The incident follows several recent cyber-related disruptions at county governments, including limited DMV services in Kittson County, Minnesota; network and internet disruptions in Spartanburg County, South Carolina; and a malware-related shutdown of county computers and phones in Chelan County, Washington.
As of the county’s statement, most systems and services had been restored, critical operations were stable and recovery continued on a limited number of remaining systems. The county has not said whether data was taken, whether any ransom demand was made or when the investigation will be complete.
