Cyber Incident Victim: Thomasville, North Carolina
Date:
Jun 2025
Location:
United States of America
Summary
Thomasville, North Carolina experienced a cyberattack on its municipal systems that disrupted many city services while essential functions remained operational. Officials stated it is unclear whether any sensitive data was accessed and noted they are working with a cybersecurity firm to assess the scope and recovery timeline. The city reported the incident to state and federal authorities, referencing North Carolina’s prohibition on government ransom payments. Nearby, the Ogeechee Judicial Circuit District Attorney’s Office in Georgia faced phone and internet outages from a separate cyberattack, limiting court operations and prompting notifications to law enforcement.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Thomasville, North Carolina, a city of roughly 30,000 residents, announced on Thursday that a cyberattack had targeted its municipal systems, leaving many city systems offline while essential services remained operational. The city’s statement noted that it was still unclear whether any sensitive information had been accessed or compromised as a result of the incident. Officials said the IT department was collaborating with a cybersecurity firm to determine the extent of the attack and estimate the timeline for recovery. The attack disrupted normal operations but did not halt critical services such as emergency response.
In Georgia, the Ogeechee Judicial Circuit District Attorney’s Office, which serves four counties including Effingham and Bulloch and a population of about 180,000, reported that a cyberattack that began on Tuesday morning caused phone and internet outages across its offices. The office issued updates through local newspapers and social media, stating that its operations were limited and that several offices would be closed while investigations proceeded and systems were recovered. Officials warned that the restoration timeline could change and that staff would have only limited ability to check email or appear in court during the disruption. Some courts within the district remained open, and state law enforcement agencies were notified of the incident.
Thomasville is situated approximately thirty minutes south of Winston‑Salem, which experienced a separate cyberattack that knocked its city systems offline in January of the same year. City Manager Michael Brandt confirmed that Thomasville had notified both state and federal authorities about the attack and noted that North Carolina law prohibits government entities from paying ransoms associated with ransomware incidents. The Ogeechee office’s statement revealed that it had previously been advised to implement a backup system specifically to guard against such events but had delayed the effort due to cost concerns, only beginning work on a comprehensive backup in December 2024. New District Attorney Robert Busbee said that his prioritization of cybersecurity enabled IT specialists to detect the intrusion in real time and intervene before any significant data could be compromised.