Cyber Incident Victim: City of Winston-Salem
Date:
Dec 2024
Location:
United States of America
Summary
The City of Winston-Salem experienced a cyber event causing disruptions to certain network systems and operations, prompting the precautionary shutdown of specific computer systems while emergency response capabilities for fire and police remained unaffected. Efforts to investigate the incident and restore full functionality are ongoing, with workarounds implemented to maintain normal operations; utilities services continue without interruption, and late fees for impacted payments are waived despite online payment systems being disabled, though in-person payments remain available. Residents are directed to alternative communication channels for reporting issues or requesting services during the outage.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 26, 2024, the City of Winston-Salem experienced a cyber event that disrupted specific systems and operations on the city’s network. The incident prompted immediate containment measures, including the voluntary shutdown of certain computer systems to prevent further compromise. City officials initiated an investigation with state and local agencies to determine the source and full scope of the event while prioritizing the restoration of affected services. Critical emergency response capabilities for fire and police departments remained fully operational, ensuring no degradation in public safety response times or call-handling capacity. Utility services for Winston-Salem Forsyth County Utilities customers continued without interruption, with the city explicitly confirming no late fees or penalties would apply to accounts unable to process payments during the outage. Online payment systems were disabled as part of the containment strategy, though in-person payments via cash or check remained available at the Bryce A. Stuart Municipal Building.
The city implemented operational workarounds to maintain essential services during the restoration process, which remained ongoing at the time of the public statement. Residents were directed to use alternative reporting channels, including the City Link chat function on the municipal website or text messaging to 855-481-LINK, for service requests and issue reporting. A comprehensive list of direct departmental contact numbers was published for sanitation, code enforcement, water billing, transportation, and other non-emergency services during regular business hours. Network restoration efforts focused on returning systems to full functionality securely, though no estimated timeline for completion was provided. The city maintained transparency through its website while emphasizing continuity of core municipal operations despite persistent system unavailability affecting unspecified administrative functions.