Richland County Land Conservation Department

Summary

Multiple government websites in Richland County, including the Sheriff’s Department and Land Conservation Department, were compromised by pro-ISIS hackers known as Team System Dz. The attackers defaced the sites with the terrorist group's logo and threatening messages, marking the third such breach within a year targeting the county's government infrastructure. Similar prior incidents affected Veterans Services and other departments, demonstrating recurring security vulnerabilities. All compromised websites were restored following the attack, which also aligned with the group's history of targeting entities like the University of Toronto and Isle of Wight, Virginia.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 15, 2016, multiple Richland County, Wisconsin government websites were compromised and defaced by the Algeria-based hacking group Team System Dz. The attackers targeted at least ten county-operated domains, including the Richland County Sheriff’s Department, Land Conservation Department, Ambulance Service, Veterans Services, Recycling Committee, Health and Human Services, County Fair, Parks Commission, Emergency Management, and the primary county government website. The defacement replaced legitimate site content with the official logo of the Islamic State (ISIS/Daesh) and a threatening message referencing the terrorist group’s agenda. A screenshot confirmed the defacement displayed propaganda supporting ISIS’s ideological goals, though the specific textual content of the message was not detailed in available reports. All affected websites were rendered inaccessible during the incident, disrupting public access to county services and information portals.

This marked the third successful defacement of Richland County’s digital infrastructure by Team System Dz within a 12-month period. Prior incidents involved nearly identical defacements targeting the Veterans Services and Sheriff’s Department websites, with pro-ISIS messages and imagery. The repeated breaches indicated systemic vulnerabilities in the county’s web security posture. By the time the incident was publicly reported, county administrators had restored all affected websites to operational status. Team System Dz’s broader activity included high-profile attacks on the University of Toronto and Isle of Wight, Virginia government systems in the preceding year. No data theft, ransomware deployment, or secondary attack vectors were documented in this incident. The restoration of services concluded the county’s confirmed response actions, with no disclosed changes to security protocols or infrastructure following the breach.

Sources

Sources available to members: 1 source.