Jefferson Parish Courthouse

Summary

A cyber attack targeted Jefferson Parish courthouses following widespread power and internet outages caused by a hurricane, exploiting vulnerabilities in the disrupted computer network. The incident forced the shutdown of judicial computer systems, resulting in extended closures of critical court facilities for several weeks as recovery efforts continued. Operations remained suspended beyond initial estimates due to the severity of the disruption.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The Jefferson Parish courthouse cyber incident occurred in late August 2021 following Hurricane Ida's landfall on August 29. The Category 4 hurricane caused widespread power and internet outages throughout Jefferson Parish, Louisiana, disabling critical infrastructure. This disruption created vulnerabilities in the courthouse computer networks that were subsequently exploited by unidentified attackers in a cyber attack. The intrusion forced the complete shutdown of court computer systems, severely disrupting operations at key judicial facilities including the 24th Judicial District Court and Jefferson Parish Juvenile Court. Courthouse authorities announced extended closures on September 13, confirming that facilities would remain inoperative until at least September 20 – nearly three weeks after Ida's initial impact. Clerk of Court Jon Gegenheimer publicly attributed the extended downtime directly to the cyber attack in an official statement, marking the first confirmation of digital sabotage compounding hurricane-related damage.

Response actions focused on containment and operational assessment, with officials prioritizing system integrity over rapid reactivation. The courthouse closures affected all technology-dependent court functions, including document processing, case management, and public record access. No data theft or specific attacker methodology was disclosed in available reports. Recovery efforts proceeded concurrently with hurricane damage repairs, creating compounded operational challenges for parish authorities. The cyber attack's timing during disaster recovery significantly prolonged service disruptions beyond typical storm-related outages, with critical judicial operations remaining suspended for at least 22 days post-landfall. Gegenheimer's public disclosure emphasized the attack's operational impact without detailing remediation measures or forensic findings.

Sources

Sources available to members: 1 source.