Coweta County

Coweta County is a Georgia county government that operates as a local administrative entity within the United States of America. Its primary function is to deliver essential public services to the residents and businesses residing within its jurisdictional boundaries. Among these services, the county’s motor vehicle division is responsible for processing vehicle tags, title transfers, and related registration duties. The judicial branch of the county oversees court operations, including the management of case filings, court calendars, and support for legal proceedings. Elections administration is another core responsibility, with the county maintaining voter registration records and coordinating the conduct of local, state, and federal elections. Public safety functions are carried out through county agencies that provide law enforcement, emergency response, and disaster preparedness services. Additionally, Coweta County operates an airport facility that supports general aviation, cargo operations, and related aerospace activities within the region. Through these interconnected departments, the county addresses transportation, legal, civic, and safety needs of the community it serves.

In August 2018, Coweta County was the target of a ransomware attack that encrypted several of its information technology servers. The disruption caused by the malware prevented access to key systems, including those used for vehicle tag processing, court case management, and voter registration. The attackers communicated a ransom demand of approximately 341,000 bitcoin in exchange for the decryption keys needed to restore the locked data. County officials initiated an incident response effort that involved isolating affected systems, engaging cybersecurity experts, and working to rebuild the compromised infrastructure. Reports indicate that the majority of the encrypted servers were restored to operational status within an estimated two‑week period. During the recovery, critical services such as airport operations, public safety dispatch, court functions, and voter registration were brought back online, while remediation continued for remaining applications. The episode underscored the vulnerability of municipal IT environments to sophisticated cyber extortion schemes and highlighted the importance of robust backup and incident response capabilities. Coweta County’s experience serves as a case study for other local governments seeking to strengthen their defenses against ransomware threats.