Everett City Hall

Summary

Everett City Hall was closed to the public after a cyber incident disrupted its internal network and systems, with the attack detected over the weekend and only essential staff permitted to work the next day while police, fire, public works and the local school district continued normal operations. The city’s IT department and the local police department are investigating the scope of the breach and working to restore full functionality, though it remains uncertain when the building will reopen to visitors.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On Sunday evening, Everett’s IT team detected a cyber incident that had impacted the city hall’s internal network and systems. The following morning, the city issued a notice announcing that Everett City Hall would be closed to the public on Tuesday due to the cyberattack. Only essential personnel were permitted to report for work on Tuesday while the investigation proceeded. The police, fire department, public works department, and public schools were stated to be able to operate normally during the incident.

Mayor Robert Van Campen emphasized that the priority was to secure the systems and infrastructure while determining the full scope of the breach. He noted that the Everett IT department and the Everett Police Department were working diligently to restore full city operations for residents as quickly as possible. The closure meant that regular city hall services accessible to the public were suspended, though critical emergency and municipal functions continued without interruption.

The announcement came on the same day that Springfield Public Schools disclosed a separate cybersecurity incident leading to school closures. Everett, a Boston suburb with a population exceeding 50,000 residents north of Boston, faced uncertainty about whether city hall would reopen on Wednesday as officials continued their assessment. No further details about the nature of the attack or the specific systems affected were provided in the available source material.

Sources

Sources available to members: 1 source.