Cyber Incident Victim: City of Jacksonville Beach
Date:
Jan 2024
Location:
United States of America
Summary
A cybersecurity event disrupted the City of Jacksonville Beach's digital infrastructure, prompting an immediate shutdown of City Hall and recreational facilities while emergency services remained fully operational. Critical systems including Beaches Energy, water treatment plants, and police dispatch maintained functionality, though accounting operations faced temporary limitations in processing vendor payments while pension and employee payroll continued. Email communications experienced significant delays during restoration efforts, with forensic investigations conducted alongside cybersecurity specialists and law enforcement to determine the incident's scope and enhance defensive measures. The city confirmed no evidence of compromised personal data and progressively restored services while maintaining operational continuity for essential utilities and public safety functions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The City of Jacksonville Beach began experiencing significant information systems disruptions on January 29, 2024, prompting an immediate shutdown of City Hall and Parks and Recreation facilities, including the Tennis Center and Golf Course. Emergency services, public safety operations, waste services, Public Works crews, and Beaches Energy crews remained fully functional despite the outage. The city implemented contingency measures, such as accepting Beaches Energy payments via check drop box at City Hall and online, while email communications experienced extreme delays. By 4:30 PM that day, officials announced City Hall would reopen the next day with limited operations, though many systems including email remained non-functional. On January 30 at 4:10 PM, the city confirmed the disruptions resulted from a cybersecurity event and had initiated an investigation with law enforcement involvement. Critical infrastructure including emergency services, pollution control plants, water plants, and police dispatch maintained full functionality, while City Hall operated with limited capacity and email systems remained inoperable.
By February 1 at 3:15 PM, email systems were partially restored though response delays persisted. A February 5 update to the City Council confirmed Beaches Energy, water treatment facilities, and police dispatch systems were fully operational, with accounting functions partially restored to process pension and employee payroll. Vendor payment capabilities remained limited but showed progress. The city's IT teams and external cybersecurity specialists were conducting forensic investigations while working to restore the technical environment and enhance security measures. Throughout the incident, officials maintained no evidence of compromised personal data and prioritized transparent communication within investigative constraints. Operational updates emphasized continuity of essential services while acknowledging persistent challenges in non-critical functions, with recovery efforts focused on comprehensive system restoration and future incident prevention.