Cyber Incident Victim: Richland County Sheriff's Department
Date:
Apr 2016
Location:
United States of America
Summary
A pro-ISIS hacking group compromised multiple Richland County government websites, including the Sheriff’s Department, Emergency Management, and Health Services, replacing content with terrorist propaganda and threats. The attackers, identified as Algeria-based Team System Dz, defaced the sites with the Islamic State’s logo and messages supporting its agenda, marking the third such breach targeting the county’s infrastructure within a year. Prior incidents similarly affected the Sheriff’s Department and Veterans Services sites, alongside unrelated attacks against the University of Toronto and Isle of Wight, Virginia. All compromised services were restored following the incident, though the repeated breaches highlighted ongoing security vulnerabilities in the county’s web systems.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 15, 2016, multiple Richland County, Wisconsin government websites were compromised by the Algeria-based hacking group Team System Dz, marking their third successful attack on the county’s digital infrastructure within a twelve-month period. The attackers defaced the official websites of Richland County Government, Sheriff’s Department, Ambulance Service, Veterans Services, Recycling Committee, Health and Human Services, County Fair, Land Conservation Department, Parks Commission, and Emergency Management. A defacement page replaced normal site content, displaying the logo of the Islamic State (Daesh) alongside a threatening message referencing an ISIS takeover. The coordinated breach occurred on a Friday, with all affected sites simultaneously displaying the propaganda material. Team System Dz publicly claimed responsibility for the attack, mirroring their previous tactics of targeting government entities to spread pro-ISIS messaging.
Historical patterns indicated prior compromises of the Sheriff’s Department and Veterans Services websites by the same group using identical methods. By the time cybersecurity media documented the incident, all compromised websites had been restored to operational status. The attack highlighted persistent vulnerabilities in Richland County’s web infrastructure, given the recurrence of breaches by the same threat actor. Team System Dz had previously demonstrated similar capabilities in 2015 through attacks against the University of Toronto and Isle of Wight, Virginia systems. No data exfiltration or extended service disruption beyond the defacements was reported, though the repeated incidents underscored systemic security deficiencies. County administrators provided no public details regarding technical remediation efforts following restoration of services.