Cyber Incident Victim: Cullman County Courthouse
Date:
Dec 2023
Location:
United States of America
Summary
A ransomware attack disrupted online payment systems at the Cullman County Courthouse after hackers compromised its physical server. The breach was discovered following reports of payment failures, leading to temporary suspension of digital transactions for property taxes. Officials aim to restore services within several days, though no definitive timeline exists. Late payments are being accommodated through early January without penalty to mitigate the operational impact. The perpetrators and extent of compromised data remain unidentified.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Cullman County Courthouse experienced a ransomware attack during the weekend of December 23-24, 2023, disrupting online payment services for property taxes. Revenue Commissioner Barry Willingham first learned of the incident on Sunday, December 24, when a resident reported via Facebook message that they couldn't complete an online tax payment. Subsequent investigation revealed unauthorized access to the courthouse's physical server infrastructure, where attackers deployed ransomware that compromised the system. The breach forced immediate suspension of all digital payment processing capabilities, though officials didn't specify whether other courthouse operations were affected. Willingham publicly confirmed the cyberattack on December 24 but provided no timeline for full system restoration, initially targeting Thursday or Friday of that week for partial recovery. Technical details about the ransomware variant or initial attack vector weren't disclosed, though officials noted the physical server configuration facilitated the intrusion.
The cyberattack caused significant operational disruptions to tax collection services, requiring manual payment processing alternatives. Courthouse administrators extended the late payment deadline to January 5, 2024, with potential extension to January 8 if system restoration faced delays. No information emerged regarding whether attackers exfiltrated sensitive citizen data or issued ransom demands. Recovery efforts focused on restoring the compromised server environment, but authorities didn't disclose whether they engaged external cybersecurity firms or law enforcement for incident response. The courthouse maintained offline operations for non-digital services throughout the incident. As of the last reported update on December 24, officials hadn't attributed responsibility to any specific threat actor or group. The disruption primarily impacted residents attempting year-end property tax payments through the online portal, with physical payment methods remaining available.