Grace Bible Fellowship

Summary

A malware attack disrupted Henry County's computer systems, causing network outages that persisted for five days and rendered various departmental websites inaccessible, including those for state court, tax assessor, and board of commissioners operations. Critical public safety services such as police and fire departments remained unaffected during the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On July 13, 2019, Henry County, Georgia, experienced a disruptive malware incident that forced the shutdown of multiple government computer systems. The attack rendered critical departmental websites—including those for state courts, tax assessors, and the board of commissioners—inaccessible to the public. By July 18, five days after the initial disruption, county networks remained offline as technicians worked to restore operations. Officials publicly confirmed malware as the suspected cause but did not disclose the specific variant or initial infection vector. The disruption persisted through the following week, indicating sustained operational challenges. No evidence suggested data theft or unauthorized access to sensitive records during this period. Recovery efforts prioritized system integrity over expediency, though restoration timelines were not publicly detailed.

The malware’s impact selectively affected administrative and public-facing services while sparing critical public safety infrastructure. Police, fire, and emergency response systems continued operating without interruption, mitigating risks to life and property. Citizens faced service delays, particularly in tax assessment and court-related functions, due to the prolonged website outages. County officials provided limited public updates, directing residents to alternative communication channels for urgent needs. The incident underscored operational vulnerabilities in local government networks, though no attribution to threat actors or motives was disclosed. Restoration progress remained unclear beyond the confirmed five-day outage window, with no subsequent public resolution timeline documented in the available source material.

Sources

Sources available to members: 1 source.