Crisis24
Incident posture
Timeline
Summary
A widespread cyberattack targeted Crisis24's legacy CodeRED platform, which provides emergency alert services to various public safety entities. The attack significantly disrupted emergency communication systems used by local governments, police, and fire agencies across the United States, impairing the dissemination of critical alerts and coordination efforts.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On November 26, 2025, a cyberattack was reported targeting Crisis24's legacy CodeRED platform. The CodeRED platform is utilized for emergency alert dissemination. It serves local government entities across the United States. Police agencies rely on the system for urgent notifications. Fire departments also depend on CodeRED for alerting personnel and the public. The attack affected the nationwide deployment of the platform. The disruption was described as widespread in the source material. No further technical details about the attack vector are provided in the article. The source does not identify the threat actor responsible for the incident. The article does not specify whether the intrusion involved malware, ransomware, or another method.
As a result of the cyberattack, emergency communication systems experienced significant disruption. Local governments faced delays in issuing public safety alerts. Police operations were hindered by the inability to disseminate time‑sensitive information. Fire agencies encountered challenges in coordinating responses due to the outage. The impact extended to multiple jurisdictions throughout the country. The source material does not detail any immediate response actions taken by Crisis24. No information is given about containment measures or mitigation steps implemented. The article does not mention any data loss, data theft, or ransom demands associated with the incident. Restoration timelines or post‑incident recovery activities are not described in the provided text. Consequently, the narrative is limited to the confirmed date, target, scope, and observed impacts as stated in the source.
Sources
Sources available to members: 1 source.