Cyber Incident Victim: City of Newburgh
Date:
Jun 2024
Location:
United States of America
Summary
The City of Newburgh experienced a network security incident causing temporary disruptions to administrative functions and payment processing systems for property taxes, utilities, permits, and parking tickets. While emergency services including police, fire, and 911 remained operational with minimal impact, municipal facilities are reopening with restored phone and email services, though payment systems will be phased back in over a week-long period alongside a grace period for delayed payments. Officials engaged external IT experts to accelerate recovery, restoring most services within a week—significantly faster than the typical downtime for such incidents—with ongoing efforts to fully reinstate remaining capabilities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On June 10, 2024, the City of Newburgh detected a network security incident that disrupted multiple municipal services and administrative functions. The incident immediately impacted the city's ability to process or accept payments for property taxes, water, sewer, sanitation, permit fees, and parking tickets, forcing temporary suspension of these financial operations. City leadership responded by engaging external IT experts and professionals who initiated around-the-clock recovery efforts. Despite these disruptions, essential services including Police, Fire, Water, Sewer, Sanitation, Engineering, and Recreation Departments maintained operations with only minor interruptions, while 911 emergency services remained fully functional throughout the incident. The city prioritized restoring critical infrastructure while continuing to assess the full scope of the security breach.
Recovery efforts progressed with the announcement that City Hall and the 123 Grand Street facility would reopen for in-person services on June 17, 2024, exactly one week after incident detection. Phone and email systems were scheduled to resume operations at 9:00 AM on the reopening date, with payment processing systems planned for phased reactivation over the subsequent seven-to-ten day period. The city instituted a grace period for late payments on property taxes and utility bills affected by the system downtime. Acting City Manager Mike Neppl emphasized the accelerated recovery timeline, noting that similar network security incidents typically require 22-26 days for resolution, while Newburgh restored most services within seven days through continuous executive team efforts. Municipal officials committed to ongoing system restoration and continued public updates through official communication channels until full operational capacity returned.