CSIDB logo
Incident

City of Quincy

Incident posture

Attack window
May 2022
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2026-03-09 15:22

Linked entities

Victim
City of Quincy
Threat actors
0 actors
Sources
3 sources

Timeline

Occurred
May 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The city of Quincy experienced a severe cyber attack that began early on a Saturday morning, described by local officials as one of the worst incidents to impact the community. The attack's origin and method remained undetermined at the time of reporting, with authorities acknowledging significant disruption but providing no specifics on compromised systems or data. The mayor emphasized the unprecedented scale of the incident for local organizations, highlighting its severity while investigations into the cause and full extent continued.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

2 techniques

Description

On May 7, 2022, the City of Quincy, Illinois, experienced a significant cyber attack that Mayor Mike Troup characterized as one of the worst incidents to impact the community. The attack commenced at approximately 7:30 a.m. local time, disrupting municipal operations. Mayor Troup publicly confirmed the incident but stated the city had not yet determined the attack's origin, method of intrusion, or specific threat actors involved. No technical details regarding compromised systems, data exfiltration, or ransomware demands were disclosed in initial reports. The mayor's emphasis on the attack's severity suggested widespread operational disruption, though the exact scope of affected services remained unspecified.

The city initiated an immediate response to contain the incident, though specific technical remediation steps were not detailed. Authorities acknowledged the ongoing investigation had not yet established fundamental facts about the breach mechanism. Public statements focused on acknowledging the attack's community impact rather than providing restoration timelines or forensic findings. The absence of attributed responsibility or disclosed attacker motives left the incident's classification undefined in initial reporting. Quincy's leadership prioritized incident management while operating with incomplete information about the breach's full consequences.

Sources

Sources available to members: 3 sources.

CSIDB