Cyber Incident Victim: City of Fayetteville

On or around June 8, 2023, the City of Fayetteville, Arkansas, experienced a suspected cyber incident, which prompted the municipal government to proactively take most of its online and web-based services offline. This action was announced publicly on the city's official website alert center as a precautionary measure in response to the detected threat. The initial announcement confirmed that the incident was impacting a wide range of digital services critical to daily municipal operations. The scope of the disruption was significant, encompassing city email systems, online payment portals for utilities and other services, online inspection scheduling, and various other network applications. The city's Information Technology department immediately engaged all available resources to address the issue, and the public was informed that online services were anticipated to remain unavailable for a minimum of several days.

Crucially, the city confirmed that core emergency services remained fully operational and were not affected by the network outage. Police, Fire, and 911 emergency dispatch services continued to function normally. However, the incident did impact the Fayetteville Police Department's non-emergency phone lines. To mitigate this specific impact, the city provided the public with an alternate non-emergency contact number, 479-575-0258, for individuals who were unable to reach the primary non-emergency line. This measure ensured that a channel for non-urgent police communication remained available to residents despite the telecommunications disruption.

By the following day, June 9, the situation persisted, and the city provided its first update. This update confirmed that both city phone systems and email services remained completely offline. The inability to process payments electronically created a direct impact on residents needing to pay their utility bills. In response, the city established a procedure for accepting utility payments in person at City Hall, located at 113 W. Mountain Street, but could only accept cash or check payments due to the offline network. To alleviate financial pressure on residents, the city also announced a policy that no utility disconnections or late fees would be enforced for the duration of the network outage.

The incident garnered attention from local and national news outlets, which reported on the debilitating effects of the cyberattack on the city of nearly 100,000 residents. As the outage continued into the following week, a June 12 update confirmed that email systems were still not operational. The disruption also extended to public civic engagement; public meetings, which typically offered a virtual attendance option via Zoom, could no longer provide that service as the city's Zoom systems were disabled as a consequence of the broader network outage.

In terms of the response effort, Fayetteville's Information Technology Director, Keith Macedo, provided further details to a local news outlet. He stated that the city's IT team was working around the clock and was still in the investigation phase of the incident, focusing all efforts on restoring city services as safely and securely as possible. To bolster its response, the city engaged external expertise by hiring three separate cybersecurity firms to assist with the investigation and recovery process. This action indicated the severity of the incident and the city's commitment to a thorough and secure restoration of its systems. The prolonged outage and the need for significant external support placed Fayetteville among a growing list of U.S. municipalities that had faced crippling cyber incidents in 2023, though no specific attribution or claim of responsibility was disclosed in the available information. The city's public communications consistently focused on the ongoing response and restoration efforts, assuring residents that work was proceeding diligently while providing practical guidance on accessing affected services through alternative means.