- OnSolve’s legacy CodeRED platform hit by cyber attack claimed by INC Ransom
- The hack forced Crisis24 to rebuild from outdated backups, permanently losing recent accounts and data
- The Douglas County Sheriff’s Office and 911 Board cut ties with CodeRED, citing citizen privacy concerns
OnSolve, a cloud-based critical incident and mass notification platform, recently suffered a highly disruptive cyber attack that forced it to shelve its old CodeRED environment and move to a new version, losing sensitive data and even an enterprise customer.
OnSolve is a service that helps organizations send emergency alerts and communications via SMS, phone, email, push notifications and more. It is used by state and local authorities, the police and other emergency services. CodeRED is the platform that enables this service.
Crisis24, the company behind OnSolve and CodeRED, recently notified its customers of a “targeted attack by an organized cybercriminal group,” in which it said data associated with the legacy OnSolve CodeRED platform was “removed from our systems.” It stressed that there is no evidence that the data was published online, but added that there is a strong possibility that it could be leaked.
The FBI was notified
“It appears that the affected data set may contain contact information for OnSolve CodeRED users: name, address, email address, phone numbers, and/or associated passwords used to create user profiles for alerts,” the notice reads.
“If the same password is used by users for other personal or business accounts, those passwords must be changed immediately.”
The attack forced Crisis24 to rebuild its service via backup. However, since the backup is more than six months old, it seems that accounts and data generated in the meantime have been lost forever.
The attack was claimed by a ransomware operator known as INC Ransom, who created a new post on his Tor data leak page and added screenshots showing OnSolve customer data.
At the same time, the Douglas County Sheriff’s Office and the Douglas County 911 Board decided to cut all ties to CodeRED and look for a replacement.
“Our top priority is the privacy and protection of our citizens, which led to the decision to end our agreement with CodeRED,” it said in a press release.
Via Bleeping Computer
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
