Cyber Incident Victim: Indiana, USA (Porter County)
Date:
May 2023
Location:
United States of America
Summary
Ogden Dunes in Indiana experienced a suspected cyber attack, prompting an investigation to assess the threat's scope. Officials warned against opening emails from town employees, particularly those with attachments, and directed inquiries to a specified phone number. The town expressed optimism about resolving the issue promptly while refraining from further comments during the ongoing probe.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 12, 2023, officials in Ogden Dunes, Porter County, Indiana, publicly announced they were investigating a potential cybersecurity attack affecting town operations. The town issued a formal notice that day confirming an active investigation to assess the scope and severity of the incident. As a precautionary measure, officials immediately advised residents and other stakeholders to avoid opening emails originating from town employees or government officials until further notice, with specific emphasis on avoiding messages containing attachments. The town established an alternative communication channel by directing individuals needing assistance to contact Town Hall via telephone at 219-762-4125. No town representatives provided additional statements beyond the initial press release, citing the ongoing nature of the investigation.
The incident prompted operational disruptions requiring immediate containment measures, though the specific systems or services affected were not disclosed publicly. Town officials restricted email communications as a primary response action while forensic analysis continued. The press release indicated authorities were working to resolve the situation promptly but did not specify technical remediation steps, attacker methodologies, or confirmed data compromises. Public notifications focused exclusively on mitigating further risk through communication restrictions rather than detailing intrusion vectors or confirmed impacts. The investigation remained active with no projected resolution timeline provided beyond officials' expressed optimism about restoring normal operations swiftly.