Nevada State Offices Suspend Services Following Cyber Incident

Incident & Breach Response,
Security Operations

Nevada Faces Widespread IT Disruption, Leading to Service Suspension

Nevada State Offices Halts Services After Cyber Incident
Image: Alexander Lukatskiy/Shutterstock

Nevada state agencies have suspended several in-person services as a result of a network security incident that disrupted local agency operations, officials confirmed on Monday. Emergency services, including 911, remain fully operational statewide, but access to various state websites, online portals, and office phone lines has been severely affected.

The governor’s office reported that the incident continues to disrupt certain technological systems. Notably, the governor’s website was offline at the time of this publication, and the state’s media office has not yet responded to inquiries for additional information. System recovery efforts are ongoing, but no specific timeline for restoring services has been provided.

As reported by the Las Vegas Sun, officials have not clarified the root cause of the breach, nor have they confirmed whether the incident was the result of a successful cyber attack. Initial detection of the incident occurred Sunday morning, prompting immediate recovery measures by the state’s security teams.

The governor’s technology office has implemented temporary routing and operational workarounds to maintain public access wherever feasible, while thoroughly validating systems prior to their restoration to regular operations. Officials noted that there remains no evidence suggesting that personally identifiable information has been compromised, and they emphasized that the incident has not impacted residents’ home internet or mobile phone services.

In assessing the potential tactics behind this incident, one might consider relevant adversary techniques from the MITRE ATT&CK framework. Possible categories such as initial access, exploitation of vulnerabilities within systems, and persistence techniques could provide insight into how attackers may have gained entry and maintained control over affected systems.

As the state navigates the complexities of this disruption, its approach towards recovery and system validation will be pivotal. Business leaders and cybersecurity professionals are encouraged to monitor this situation closely to glean insights that may inform their own cybersecurity strategies and preparedness in the face of similar potential threats.

Source link