Cyber Incident Victim: Tallapoosa County Probate Office
Date:
Jun 2020
Location:
United States of America
Summary
A ransomware attack disrupted operations at the Tallapoosa County Probate Office, affecting servers over a weekend. The county's probate judge confirmed no data or personal information was compromised, and systems were gradually restored to resume normal business activities following the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A ransomware attack struck servers at the Tallapoosa County Probate Office on the morning of Sunday, June 14, 2020, disrupting normal operations. The incident occurred over the weekend, with recovery efforts commencing immediately to restore affected systems. Probate Judge Talmadge East publicly confirmed the cyberattack, emphasizing that no sensitive data or personal information was accessed or exfiltrated by the threat actors. The attack temporarily hindered the office's ability to conduct routine business operations, though critical functions were prioritized during the restoration process. County IT personnel worked to isolate compromised systems and implement security measures to prevent further spread of the ransomware. By June 20, 2020, systems had been sufficiently restored to allow the resumption of new business transactions, though operations were returning to normal gradually rather than instantaneously.
The county maintained transparency about the incident's scope, repeatedly assuring constituents that no data breach occurred despite the operational disruption. Recovery efforts focused on restoring server functionality without paying any ransom demands, though specific technical remediation steps weren't disclosed publicly. Judge East's statements highlighted the containment of damage to operational systems rather than data compromise, with no evidence suggesting unauthorized access to sensitive records like court documents or personal identifiers. The incident remained confined to the Probate Office's infrastructure without spreading to other county departments. Normal service levels were progressively reinstated throughout the week following the attack, with full recovery achieved without reported residual effects on data integrity or long-term operational capacity.