Cyber Incident Victim: Columbia, Missouri
Date:
Feb 2015
Location:
United States of America
Summary
A distributed denial-of-service attack disrupted access to Columbia, Missouri's government website, causing intermittent availability followed by complete unresponsiveness. The IT department addressed a significant traffic surge but failed to fully restore services, mirroring a prior outage linked to an unrelated retaliatory act by an individual using the alias Bitcoin Baron. No data compromise occurred, with the primary impact being temporary service unavailability. The incident's origin remains unclaimed, potentially indicating a demonstration of DDoS capabilities rather than targeted activism. Investigation status was unclear, paralleling unresolved aspects of the earlier disruption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 13, 2015, the official government website of Columbia, Missouri, experienced irregular access for visitors due to a distributed denial-of-service (DDoS) attack originating from an unknown entity. The city’s Information Technologies Assistant Director, Mark Neckerman, confirmed the disruption occurred Thursday morning when a significant traffic spike overwhelmed the site’s servers. The IT department responded by mitigating the attack and restoring functionality, though the website remained unresponsive at the time the article was published. No individual or group claimed responsibility for the incident, leading to speculation that the attack may have served as a demonstration by DDoS service providers testing their capabilities. The investigation’s status was unclear, but officials noted similarities to a prior outage on December 24, 2014, which had rendered city services inaccessible for three days.
The 2014 incident had initially been linked to the Anonymous hacktivist collective, but an individual using the alias Bitcoin Baron later claimed responsibility, citing retaliation for a SWAT raid that resulted in the deaths of two dogs. Unlike data breaches or intrusions, the 2015 DDoS attack exclusively disrupted website availability without compromising sensitive information or systems. Columbia’s IT team resolved the immediate technical issue but did not disclose specific countermeasures or long-term mitigation strategies. The attack underscored recurring vulnerabilities in the city’s web infrastructure, though no further technical details about the attackers’ methods or the traffic volume were provided. Service restoration timelines and broader operational impacts beyond public access to the website were not elaborated in available reports.