Cyber Incident Victim: Chatham County
Date:
Oct 2020
Location:
United States of America
Summary
A cyberattack rendered Chatham County's government network, email, and phone systems inoperable, prompting collaboration with law enforcement and support agencies for recovery. Critical services, including early voting and 911 communications, remained unaffected while officials prioritized secure restoration of operations and maintained essential functions. The unidentified attackers' motives and methods were not disclosed, and the county continued evaluating the breach's full impact while developing plans to gradually resume non-critical services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 28, 2020, Chatham County, North Carolina, experienced a cyberattack that rendered its government network, email systems, and phone lines inoperable. County Manager Dan LaMontagne confirmed the disruption in a public statement on October 30, noting systems would remain offline for an undetermined duration. The attack did not compromise early voting infrastructure or 911 communications, preserving critical election and emergency response functions during the incident. LaMontagne emphasized the county’s immediate priority was restoring systems securely while maintaining essential services. The county engaged law enforcement and external support agencies to investigate the breach and coordinate recovery efforts. Public Information Officer Kara Dudley stated officials were still evaluating the full scope of the attack’s impact, with no specific details about the breach mechanism or data compromise available at the time. Departments across the county government began developing contingency plans to address interruptions to non-critical services pending system restoration.
No attribution for the attack was disclosed, as the county declined to identify potential threat actors. Dudley indicated updates would be provided as recovery progressed, though no timeline for full operational restoration was established. The incident occurred against a backdrop of heightened cybersecurity concerns ahead of the November 3 general election, with unrelated polling indicating voter apprehensions about election security. Chatham County’s response focused on containment, forensic analysis, and gradual service restoration without public elaboration on technical mitigation measures. Operational disruptions persisted beyond the initial announcement, with county staff relying on alternative procedures to sustain governmental functions during the outage.