Cyber Incident Victim: Philadelphia's online court system
Date:
May 2019
Location:
United States of America
Summary
A malware infection disrupted Philadelphia's online court system, prompting a precautionary shutdown of network access and electronic services. The incident blocked electronic document filings, jury duty signups, and temporarily disabled the court website and email systems, forcing reliance on paper processes and in-person operations. Housing law faced severe consequences as foreclosure postponement filings risked being lost in the manual workflow, potentially leading to wrongful home losses despite ongoing court proceedings. Legal aid organizations manually verified orders to mitigate errors, while the courts contracted cybersecurity experts for remediation without providing a recovery timeline. The disruption created operational chaos, extended wait times, and raised due process concerns as critical services remained offline indefinitely.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 21, 2019, Philadelphia’s online court system abruptly became inaccessible due to a malware infection, halting all electronic operations. The courts confirmed malware was detected on "a limited number" of computers, prompting a precautionary shutdown of network access to contain the threat. Officials provided minimal public details, citing concerns that disclosure might interfere with remediation efforts, though they confirmed engaging a cybersecurity firm to investigate. The immediate effect paralyzed electronic document filing, forcing attorneys and litigants to submit paperwork in person. This shift caused logistical strain, including longer wait times, physical file storage challenges, and reduced hours for accepting documents. Secondary disruptions included the court website’s inaccessibility, jury duty registration failures, and temporary email system outages, with jury duty excusals temporarily managed via Twitter. The courts remained physically open but operated under significant constraints, emphasizing manual processes while declining to specify a restoration timeline.
The outage disproportionately impacted housing law, particularly foreclosure proceedings. Defendants facing home repossession typically file postponement requests electronically to delay sales while preparing defenses, but the shutdown created risks of missed filings or lost paperwork. Community Legal Services attorney Rachel Gallegos petitioned for a month-long foreclosure moratorium, arguing the outage undermined due process, but the court denied the request, allowing foreclosures to proceed. Gallegos documented instances where postponement orders failed to reach sheriff’s offices, potentially due to internal system disruptions, requiring manual verification of "inch-thick" stacks of orders to prevent errors. Self-represented litigants faced heightened risks, as the electronic system’s absence could mislead them into believing courts were entirely nonfunctional. The court maintained limited public updates via Twitter, rescheduling jury duty and addressing complaints, while attorneys like Gallegos implemented ad hoc safeguards against procedural failures. No restoration timeline was published, with officials stating only that updates would follow as remediation progressed.