Cyber Incident Victim: Fulton County
Date:
Jan 2024
Location:
United States of America
Summary
A cyberattack disrupted Fulton County's operations, causing a widespread IT outage that impacted critical systems including phone services, tax processing, and court functions. The incident forced manual handling of sheriff's office procedures, limited property tax and justice-related transactions such as firearm and marriage license processing, and restricted motor vehicle renewals to kiosks. Public library computers were temporarily unavailable, though online catalogs remained accessible. While most offices stayed open, the tax commissioner's downtown location closed. Authorities confirmed no evidence of sensitive data theft and are investigating with federal law enforcement assistance. Recovery efforts are ongoing without a specified resolution timeline.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 28, 2024, Fulton County, Georgia, experienced a widespread IT outage initially described as unexpected before officials confirmed it stemmed from a cyberattack. The disruption began over the weekend, with full public disclosure occurring on Monday, January 29. County government buildings displayed signs alerting residents to ongoing issues, though many individuals, such as resident Mark Blackmon, expressed frustration after being turned away from services like vehicle tag registration due to inoperable systems. Fulton County Board of Commissioners Chairman Robb Pitts clarified the incident as a cyberattack late Monday afternoon, specifying impacts on critical infrastructure including Voice over Internet Protocol (VOIP) phone systems, court operations, and tax processing systems. The outage forced the closure of the downtown Atlanta office of the Fulton County Tax Commissioner, while other offices limited services to motor vehicle renewals via kiosks or general inquiries. Library public computers were temporarily unavailable, though online catalogs remained accessible.
The cyberattack disrupted multiple justice system functions, halting e-filing services and transactions for firearms licenses and marriage licenses. The Fulton County Sheriff’s Office reported automated and online process failures, requiring manual handling of affected operations. County officials, including Chairman Pitts, stated no evidence indicated the theft of sensitive citizen or employee data but emphasized ongoing scrutiny of this aspect. Law enforcement agencies, including the FBI, engaged with the county to investigate the incident, though no specific details about threat actors or attack methods were disclosed. Residents encountered limited alternatives for county services, with retail location kiosks available for motor vehicle renewals and email as the primary county communication channel during phone system outages. The county’s Department of Information Technology worked to restore systems but provided no estimated resolution timeline, leaving service restoration efforts ongoing as of the last reported updates.