Baltimore City State's Attorney's Office

Summary

The Baltimore City State's Attorney's Office is investigating an apparent cybersecurity incident after being notified of unusual activity on its network. Management Information Systems responded immediately to secure the network and activate the cyber incident response plan, while the State's Attorney directed the executive team to work with outside partners for additional protection. The office says it continues to enhance its cybersecurity posture and coordinate with law enforcement as the investigation proceeds. In a related development, Baltimore City Public Schools reported that it is also dealing with a cybersecurity incident affecting some of its IT systems.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On March19, the Baltimore City State's Attorney's Office was notified of unusual activity on its network, prompting an immediate response from the Management Information Systems team. The team moved to secure the network and activated the office's cyber incident response plan to contain the detected activity. State's Attorney Ivan Bates then directed members of the Executive Team to work with outside partners to strengthen protection against the ongoing threat. Communications Director James Bentley issued a statement confirming that the office was investigating an apparent cybersecurity incident and that efforts were underway to enhance its cybersecurity posture. Bentley also noted that the office was coordinating with law enforcement agencies as part of the response. The investigation remained active at the time of the report, with no further details about the scope or origin of the activity disclosed.

In addition to the State's Attorney's Office incident, Baltimore City Public Schools reported that it was also dealing with a cybersecurity incident after some of its IT systems were breached on February 13. The article did not specify whether the two incidents were related or if they involved similar tactics or threat actors. Both organizations emphasized their ongoing efforts to address the security events and to protect their respective networks. The State's Attorney's Office continued to monitor the situation and to implement additional safeguards as the investigation progressed. No information was provided about any data loss, service disruption, or specific attacker actions resulting from the incident. The narrative reflects only the facts presented in the source material regarding detection, response, and coordination efforts.

Sources

Sources available to members: 1 source.