Nevada Admits Cyberattack, Personal Data Compromised

A ransomware attack has disrupted digital services and government offices in the state of Nevada, as confirmed by Nevada's Chief Information Officer, Tim Galluzi, in a press conference on August 27. The attack resulted in the exfiltration of data from state networks, causing a closure of government offices and the temporary shutdown of digital services.

In response, the United States Cybersecurity and Infrastructure Security Agency (CISA) has pledged its support for Nevada's response and recovery efforts. CISA's assistance includes providing real-time incident response at no cost, as well as deploying Threat Hunting teams to mitigate any remaining threats on Nevada's network.

The specific nature of the exfiltrated data is currently unknown, and a forensic investigation is ongoing among third-party specialists and state and federal partners, including the Federal Bureau of Investigation (FBI). The name of the third party involved in the investigation is not publicly disclosed.

Galluzi acknowledged the frustration felt by residents who are unable to access state services due to the attack. He emphasised that the restoration of systems is a "meticulous process," and urged residents to remain patient as efforts are made to fully recover from the incident.

CISA's support is part of a broader unified effort to support Nevada's response and recovery. The agency has also advised on the Federal Emergency Management Agency's (FEMA) emergency response grants and other available assistance.

At the time of writing, no known cybercriminal actor has publicly claimed responsibility for the incident. Galluzi expressed hope for an extension of the Cybersecurity Information Sharing Act, which could provide further resources for the state's response and recovery efforts.

The Office of the Governor of Nevada first disclosed a network security incident on August 25, and a press release from CISA was published on August 27 to confirm the ransomware attack and outline the agency's support for Nevada's response and recovery efforts. The FBI is assisting in the investigation of the attack, and the state continues to work closely with federal partners to address the incident and restore normal operations.