Municipal emergency warning service offline after hackers steal user data

Steven

Municipal emergency warning service offline after hackers steal user data

Summary

Crisis24 has confirmed a cybersecurity incident that targeted the OnSolve CodeRED mass notification platform used by many US municipalities. The attackers damaged the CodeRED environment, stole user data (names, addresses, emails, phone numbers and passwords) and published some of it online. Crisis24 has taken the platform offline, notified customers and is rebuilding a replacement using backups current only to 31 March. Some counties have already terminated contracts; others are relying on social media or FEMA’s IPAWS alerts while the service is offline.

Key Points

  • The OnSolve CodeRED mass notification system was compromised; attackers damaged the environment and exfiltrated user data.
  • Stolen information reportedly includes names, addresses, emails, phone numbers and passwords; reused passwords are at particular risk.
  • Crisis24 decommissioned CodeRED, is rebuilding from backups (only current to 31 March) and has begun security audits and external penetration testing.
  • Some municipalities have suspended or terminated contracts; interim alerts have been issued via IPAWS, social media and other channels.
  • The INC ransomware gang claimed responsibility; the group has a history of attacking government and public-sector organisations.

Context and relevance

This affects public safety communications: CodeRED is used to push weather warnings, AMBER alerts, evacuation orders and similar emergency notices. With the platform offline, local authorities face gaps in their ability to reach residents directly — especially for time-critical alerts sent to mobile phones. The incident highlights persistent risks for outsourced emergency infrastructure and the operational impact when those services are disrupted.

Why should I read this?

Look — if you signed up for local alerts, your contact details might be out there. It’s also a neat reminder that the systems that tell you to evacuate in an emergency can be hacked. Quick takeaway: change reused passwords, check municipal notices for resubscription instructions, and keep an eye on official channels for urgent alerts while CodeRED is rebuilt.

Source

Source: https://therecord.media/emergency-warning-service-offline