City of Abilene

Summary

The city experienceda cyber incident that caused unresponsive servers and led to the disconnection of affected and critical assets as part of its incident response. Officials brought in cybersecurity experts, worked to restore systems, and kept emergency services operational while monitoring for unusual activity. Water utility customers could still pay their statements online or in person, though response times were slower, and past‑due accounts were not shut off during the outage.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 18, 2025, city officials announced that they had received reports of unresponsive servers within the internal network on the preceding Friday and immediately activated the incident response plan. As part of the response, affected and critical assets were disconnected to secure the systems. The city launched an investigation and engaged industry‑leading cybersecurity experts to determine the nature and scope of the incident while also notifying relevant authorities. The IT department began working around the clock to restore services and minimize operational downtime.

Throughout the response, emergency services remained operational and able to provide timely assistance, and no unidentified financial activity was detected. Certain systems were taken offline as a precautionary measure, but the water utility continued to allow customers to pay their municipal services statements. While systems and telephones were being restored, customers might experience slower than normal responses to service requests, and email inquiries were being reviewed for timely replies. Because of the ongoing system issues, the city decided not to shut off past‑due water accounts, permitting payments in person with cash or check only and online via the designated portal for credit, debit, and e‑check transactions. For water‑related emergencies, residents were directed to call 325‑660‑6405.

The city emphasized that the investigation is in its early stages and will be time‑intensive, with officials planning to share additional details each week as more information becomes available. Officials reiterated their commitment to system security and thanked the public for patience and understanding while restoration efforts continue. The statement concluded by noting that the city would continue to monitor its networks for any unusual activity.

Sources

Sources available to members: 2 sources.