Cyber Incident Victim: Jefferson County Property Valuation Administrators office
Date:
Dec 2020
Location:
United States of America
Summary
A ransomware attack targeted the Jefferson County Property Valuation Administrators office, with attackers holding the agency's data hostage for payment. The office, which provides public access to real estate records and serves title researchers, discovered the incident mid-week and subsequently closed its operations for an extended period to address the breach, disrupting public services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Jefferson County Property Valuation Administrator's (PVA) office experienced a ransomware attack discovered on Wednesday, December 16, 2020, as confirmed by PVA Colleen Younger in a public statement. Hackers encrypted the agency's data and demanded payment for its release, effectively holding the information hostage. The attack prompted immediate operational disruptions, forcing the office to close its physical location indefinitely. This closure suspended all public access to real estate records and title research services typically conducted on-site. Younger disclosed these details during an interview with WDRB News on Monday following the incident's discovery, though the exact time of initial compromise remained unspecified.
Jefferson County PVA officials implemented containment measures by shutting down office operations through at least December 28, 2020, to prevent further system compromise and assess damage. The closure directly impacted real estate professionals and citizens relying on the office for property valuation data and title examination services. No evidence suggested data exfiltration occurred beyond the ransomware encryption, though attackers' identities and ransom demands were not publicly disclosed. Recovery timelines and data restoration methods were absent from official statements. The incident represented a targeted disruption to local government property assessment operations without disclosed collateral impacts on other county systems or partner agencies.