Cyber Incident Victim: City of Meriden
Date:
Mar 2026
Location:
United States of America
Summary
The city of Meriden, Connecticut reported a ransomware attack claimed by the group Inc, which officials said began weeks ago and caused widespread disruption to municipal services. Officials said that more than a month after the initial breach many city systems remained offline or only partially restored as recovery efforts continued. The attackers asserted they had exfiltrated data from the city’s networks, though officials have not disclosed what information was taken. Recovery efforts have involved restoring servers, phone and internet services, and working with external cybersecurity firms to strengthen defenses.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On February 17, 2026, city officials in Meriden, Connecticut reported that the municipality had been subjected to a cyberattack. The ransomware group identifying itself as Inc claimed responsibility for the intrusion. The group’s claim was publicly reported in a BSafes Library article dated March 31, 2026.
The attack caused significant disruptions to the city’s services. As of the March 31 report, officials stated that restoration efforts were still ongoing, having continued for over a month since the initial disclosure. The nature of the disrupted systems was described as significant, though specific details were not provided in the source.
The incident was documented in the BSafes Library’s Outage section on March 31, 2026, alongside other contemporaneous cyber incidents. No further specifics regarding the data exfiltrated or the exact systems affected were included in the article.
The report noted that, at the time of publication, the city’s operations had not yet returned to normal, indicating that recovery work remained incomplete. No information about ransom demands, attacker motives, or specific mitigation steps taken by the city was disclosed in the source material.