City of Henderson

The City of Henderson is a municipal government organization headquartered in the United States of America. It provides a range of local government services to residents, encompassing public safety, infrastructure maintenance, and administrative functions. Among its operational responsibilities, the city operates a detention center that houses individuals awaiting trial or serving short sentences. The city also coordinates volunteer programs that engage community members in various civic initiatives. Additionally, it maintains an internal legislative bill‑tracking system used to monitor the progress of proposed ordinances and resolutions. These functions are supported by a municipal web server that makes certain datasets publicly accessible via the internet.

On June 20, 2015, a hacker gained unauthorized access to that municipal web server and remained undetected for nine days. The intrusion exposed raw versions of publicly accessible data related to detention‑center inmates, volunteer registrations, and the legislative bill‑tracking system, though no sensitive personal information was reported as compromised. Upon discovery, the city disabled the affected server, engaged federal authorities, and contracted a specialized cybersecurity firm for approximately $40,000 to assess containment and verify that no lateral movement had occurred. System administrators mandated password resets for all employees and kept the inmate lookup service offline for more than six weeks while awaiting external security validation. The incident prompted an internal review of the city’s information‑technology defenses, leading to updates in security policies and practices. The episode underscored the need for continued vigilance in protecting municipal IT assets.