Geauga County Department of Water Resources

Chardon City, also known as Geauga County, operates within the United States public sector, specifically managing essential local government services. The Geauga County Department of Water Resources represents one such operational unit under its jurisdiction, responsible for critical water resource management functions. This department relied on an outdated email server running unsupported software from the 2012 era, which became a significant vulnerability point. The cybersecurity posture was compromised due to the lack of recent patches on this legacy system, highlighting a lapse in maintaining current technology standards essential for operational security.

A cybersecurity breach occurred on April 12, 2023, targeting the Water Resources Department's email server. Malicious command-line activity was detected via CrowdStrike Falcon alerts, prompting immediate action from ADP cybersecurity personnel who successfully isolated the compromised server. This containment prevented the attack from spreading to other county systems, ensuring no disruption to broader county services occurred beyond the Water Resources email access. The incident exposed serious internal governance failures, notably a delayed migration to Microsoft 365 attributed to administrative disputes within county leadership. Emergency proceedings revealed public accusations, with the county prosecutor blaming the county administrator for obstructing necessary security upgrades. In response, the ADP board mandated an immediate migration of the Water Resources Department to Microsoft 365, with the associated costs borne by the department itself, alongside ongoing efforts for data recovery from the isolated server.