Cyber Incident Victim: Randolph County
Date:
Jul 2019
Location:
United States of America
Summary
A hacker group known as "VandaTheGod" compromised a county government website, replacing its homepage with a vulgar anti-government message demanding more jobs, hospitals, and condemning corruption and law enforcement. The attack was part of a broader campaign targeting dozens of government websites globally within a short timeframe, with the group publicly documenting their defacements via social media to spread their ideological stance. The incident prompted an investigation by homeland security authorities, though the attackers appeared focused on disruptive messaging rather than deeper system compromise.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On July 30, 2019, the Randolph County government website in North Carolina was defaced by the international hacker group "VandaTheGod." The attackers replaced the homepage with a profanity-laced anti-government message criticizing political corruption, demanding increased job opportunities and healthcare access, and expressing hostility toward law enforcement. The defacement included the hashtag "#Hacked" and linked to a screenshot of the compromised site, which VandaTheGod publicly shared via their Twitter account. Randolph County officials confirmed the breach and transferred the investigation to homeland security authorities. The county’s IT department worked to restore the original homepage and implement security improvements, though no evidence suggested the attackers accessed or exfiltrated sensitive data beyond the defacement.
The incident was part of a coordinated campaign by VandaTheGod targeting dozens of government websites globally within a 48-hour period, as documented by Zone-H.org, a platform tracking website defacements. The group’s Twitter feed indicated a consistent pattern of anti-establishment messaging across these attacks, framing their actions as hacktivism aimed at exposing government corruption and advocating for socioeconomic reforms. DataBreaches.net contacted VandaTheGod, who asserted their defacements raised public awareness about systemic issues, though no verifiable evidence of tangible policy changes or grassroots mobilization resulted from the incidents. Randolph County’s breach primarily caused operational disruption, requiring downtime for restoration and security remediation, but did not involve data theft or further system compromise. The broader campaign underscored vulnerabilities in public-sector web infrastructure while highlighting the limited practical impact of symbolic hacktivist operations despite their disruptive visibility.