Leavenworth Kansas cyberattack disrupts city services

pCity says invoices permits and hiring systems still face workarounds as investigators probe November network intrusionppOfficials in Leavenworth Kansas say a cyberattack behind a Nov 19 network outage is still disrupting invoice permitting and hiring systems though emergency services remain unaffectedppThe city first reported a network outage affecting city services on Nov 19 after computer and phone systems began failing late that morning Outside information technology experts were brought in to investigate and on Nov 25 the city confirmed the disruption stemmed from a cyberattackppThe incident affected the city governments internal network rather than the broader internet or utility infrastructure Local reporting from the Leavenworth Times has also described the event as a cyberattack on the municipal computer networkppCity officials say multiple backoffice and publicfacing functions may need manual workarounds for the near future including invoice processing for vendor payments online permits and inspections and emailed employment applications Residents and contractors are being told to use mail or inperson dropoff options for permit requests and job applications at City HallppDuring the initial outage Leavenworth reported limited phone and email access and a reduced ability to issue licenses and permits Emergency operations were described as still fully functioning and not affected indicating 911 police and fire services remained onlinepp
Chip in once
If this reporting helped you a onetime tip helps cover hosting tools and future investigations

pp
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone

ppVendors may see delays in payment processing and residents who rely on online permitting and inspection tools are facing additional paper steps until systems are fully restoredppIn its Nov 25 update the city said it was working around the clock to resolve ongoing system disruptions and did not yet have a timeline for restoring full operationsppOn Dec 4 the Leavenworth Times reported that City Manager Scott Peterson described the citys computer network as mostly functional following the cyberattack while noting the incident occurred roughly two weeks earlier That suggests core services are back online but some systems may still be degraded or running on temporary fixesppOfficials say they are continuing a technical investigation with outside experts and have not announced a full allclear for city technology systemsppCity leaders said their investigation has determined that our issues stemmed from a cyberattack and emphasized that the privacy and security of information entrusted to the city is a top priorityppLeavenworth also said it is not presently aware of any compromise of sensitive information tied to the incident but stressed that potential data exposure remains an active focus Officials have pledged to notify individuals if they later find that personal or sensitive data were accessedppKansas has seen a string of disruptive cyber incidents from a 2023 ransomware attack on the Kansas Judicial Branch that forced statewide courts offline to more recent outages at Rainbow Communications Susan B Allen Memorial Hospital and Atchison County that cut phone service delayed care and closed county officesppSimilar attacks have hit city governments in Mentor Ohio Attleboro Massachusetts and La Vergne Tennessee disrupting phones email and internal systems while core public safety services stayed onlineppLeavenworth is a city of about 37000 people in northeastern Kansas and serves as the seat of Leavenworth County along the Missouri River It is also home to Fort Leavenworth and several major federal and military prison facilitiesppCity officials say the forensic investigation and system restoration work will continue with further updates promised as they learn more They have not publicly identified the type of malware or technique used whether any ransom demand was made or whether law enforcement or federal cyber agencies are formally involvedppResidents contractors and job applicants who rely on online city services are being urged to use mail or inperson dropoff options for permits inspections and applications until the city announces that its portals and email workflows are fully restoredppA writer intelligence analyst and technology enthusiast passionate about the connection between the digital and physical worlds

His views expressed here do not necessarily reflect those of his employer and he writes here as an individualpp
District cancels Tuesday classes after taking network offline parent email cites ransomware while Facebook post mentions only closure
pp
District says Google domain problem is disrupting email and could generate phishing from school accounts
pp
West Pierce Fire Rescue says 911 and emergency response remain fully operational while it works with the FBI
pp
Network security issues shut branches and website across Deschutes County as officials probe suspected breach
pp
Rhysida claim appears on ransomware tracking site but tribe has not confirmed an attack
pp
PRwire hack claim meets stable DNS records conflicting details and a bounced press inbox
pp
Guest contribution by Joseph Topping security researcher The views expressed are solely the authors and do not represent any employer agency or organization He writes in a personal capacity
ppppGreat Check your inbox and click the linkppSorry something went wrong Please try againpp
Rhysida claim appears on ransomware tracking site but tribe has not confirmed an attack
pp
Medical marijuana regulator faces weeks of portal trouble as Oklahomas cybersecurity unit reviews the system and officials flatly reject hack rumors
pp
Explicit AI links on Washington wagov pages tie into a wider pattern of public upload abuse and SEO spam affecting government sites in multiple states
pp
Phones and email were disrupted in late October officials went public in December as ransomware group Interlock claims attack
pp
District says Google domain problem is disrupting email and could generate phishing from school accounts
pp
West Pierce Fire Rescue says 911 and emergency response remain fully operational while it works with the FBI
pp
Rhysida claim appears on ransomware tracking site but tribe has not confirmed an attack
pp
Phones and email were disrupted in late October officials went public in December as ransomware group Interlock claims attack
p