Cyber Incident Victim: Richland County Government
Date:
Mar 2015
Location:
United States of America
Summary
Pro-ISIS hackers operating under the name Team System DZ compromised multiple Richland County Government websites, including the Sheriff's Department, municipal services, and recreational facilities, replacing content with a defacement page expressing support for ISIS and anti-US sentiments. The attackers, reportedly based in Morocco, left messages condemning Israel and the United States while declaring allegiance to jihadist activities. The incident disrupted several public-facing county services, though all affected sites were subsequently restored to normal operation. This breach aligns with a broader pattern of pro-ISIS cyber groups targeting US government entities during this period.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On March 21, 2015, pro-ISIS hackers operating under the name Team System DZ, identified as originating from Morocco, breached multiple websites belonging to Richland County, Wisconsin. The attackers compromised the county’s Sheriff’s Department website along with six additional government-affiliated sites: the City of Richland Center Municipality, Parks Commission, Ambulance Service, Richland County Fair & Recycling, Land Conservation Department, and Richland County Fitness Center. Hackers replaced legitimate website content with a defacement page displaying the message: "Hacked by Team System Dz! I am a Muslim & I love jihad, I love ISIS | Fuck Israel & USA." This action constituted a coordinated digital protest expressing support for ISIS while targeting US and Israeli entities. The defacement included Zone-h mirror links as proof of compromise, a common practice among hacktivist groups to validate their claims. No data theft or secondary attacks beyond the defacements were reported in available sources. All affected websites remained offline until restoration efforts were completed prior to the publication of the reporting article later that same day.
The incident occurred amid a series of pro-ISIS cyber operations targeting US government entities in early 2015, including January’s attack on Isle of Wight, Virginia’s systems and February’s compromise of Newsweek’s Twitter account. Team System DZ’s attack exclusively impacted public-facing web servers hosting informational sites for Richland County services, with no evidence suggesting deeper network intrusions or operational disruptions to physical infrastructure. Restoration timelines indicated rapid containment, though specific technical remediation steps were not disclosed. Historical context from the article notes this aligned with broader ISIS-affiliated cyber activities, including recent leaks targeting US military personnel. With a population of 18,021 residents, Richland County’s digital infrastructure represented a mid-tier government target for ideological messaging rather than high-value intelligence gathering. The defacements caused temporary informational outages for citizens seeking online access to county services but resulted in no reported financial losses or long-term operational consequences.