Cyber Incident Victim: Lincoln County Sheriff's Office
Date:
Jul 2019
Location:
United States of America
Summary
A cyberattack targeted multiple local government agencies, including the Lincoln County Sheriff’s Office, disrupting their websites and internal computer systems. The coordinated overnight incident caused service outages, with some agencies restoring functionality by late afternoon while others remained offline; officials confirmed no public data was compromised during the breach.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 26, 2019, hackers launched coordinated cyberattacks against multiple North Carolina government entities, including the Lincoln County Sheriff’s Office, the City of Concord, and Anson County. The attacks began overnight, disrupting web pages and servers across these agencies. Officials confirmed the incidents involved unauthorized access attempts to critical infrastructure, though specific intrusion methods were not disclosed. By 5 p.m. on the day of the attack, partial service restoration efforts were underway, with some agencies successfully recovering operational capabilities while others remained offline. The Lincoln County Sheriff’s Office experienced disruptions to its digital services, though the exact nature of affected systems—whether public-facing websites, internal databases, or communication networks—was not detailed in available reports. No evidence indicated that attackers exfiltrated public information during the breach, according to statements from officials to NBC Charlotte.
Response efforts focused on containment and restoration, with technical teams working to isolate compromised systems and rebuild affected infrastructure. The multi-agency impact suggested a broader targeting strategy, though no attribution or motive was confirmed. Service recovery timelines varied among the entities, reflecting differences in attack severity or infrastructure resilience. The Lincoln County Sheriff’s Office did not publicly disclose whether ransomware or data destruction tactics were employed, nor did reports confirm if emergency protocols like manual record-keeping were activated during downtime. Officials emphasized that sensitive public data remained secure despite the disruptions, though the attacks underscored vulnerabilities in local government networks. The incident highlighted operational challenges in coordinating responses across geographically dispersed agencies facing simultaneous threats.