Cybercrime

City of Cleveland Scrambling to Restore Systems Following Cyberattack

The City of Cleveland says emergency services, utilities, and airport are unaffected by a recent cyberattack.

The City of Cleveland says emergency services, utilities, and airport are unaffected by a recent cyberattack.

The City of Cleveland is struggling to restore certain services that have been affected by a cyberattack earlier this week.

The incident was disclosed on June 10, when the city announced that it took its systems offline as a containment measure.

“City Hall and Erieview are closed today June 10, except for essential staff, as we investigate a cyber incident. We have shut down affected systems to secure and restore services. Emergency services and utilities are not affected. Updates will be provided as available,” the city announced on X.

While Cleveland re-opened both the City Hall and its satellite offices at Erieview Plaza on Wednesday, it decided to close the City Hall again for the remainder of the week, as it continues to work on restoring shut-down systems.

“City services will not be available to the public at City Hall tomorrow, June 13 and Friday, June 14. City Hall will be open for employees,” Cleveland announced, advising the public to wait for further information on when services will be restored.

The city said it has been working with key partners to investigate the nature and scope of the incident, noting that taxpayer information held by the CCA and customer information held by Public Utilities are confirmed to have not been affected by the attack.

Advertisement. Scroll to continue reading.

Cleveland also announced that basic city services, including emergency services, public works, public utilities, airport, and online payments were not affected. The Municipal Courts continued to function normally, as they are on a different system.

“Residents are encouraged to use online services or call 311 for more information. We ask for the public’s patience as the city continues its effort to restore system access and broadly recover from the incident in a safe and strategic manner,” Cleveland said.

The city shared no information on the identity of the attackers or on whether file-encrypting ransomware was used, albeit taking systems offline is the typical response to a ransomware attack.

SecurityWeek has not seen any ransomware or extortion group claiming responsibility for the incident.

Related: Personal Information of 44,000 Compromised in First American Cyberattack

Related: Canada’s RCMP, Global Affairs Hit by Cyberattacks

Related: Operations, Trading of Eagers Automotive Disrupted by Cyberattack

Related: Mr. Cooper Says Customer Data Compromised in Cyberattack

Related Content

Data Breaches

The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtronic.

Cybercrime

Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13.

Cybercrime

Signature Healthcare was forced to cancel some services, and pharmacies are unable to fill prescriptions due to the hacker attack.

Cybercrime

The company is investigating the full scope of the incident, including whether any files have been compromised.

Data Breaches

The ShinyHunters hacker group claimed to have stolen over 350GB of information from European Commission cloud systems.

Cyberwarfare

Analysis reveals a six-month buildup of Iran-linked cyber infrastructure, including US-based shell companies, designed to weather kinetic strikes and ensure the resilience of its...

Cyberwarfare

Evidence indicates that the attackers leveraged existing endpoint management software rather than malware to wipe devices.

Cyberwarfare

Stryker was targeted by the Handala group, which claims to have wiped more than 200,000 of the company’s devices.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version