Anne Arundel County recovers after cyber incident disruption

Anne Arundel County in the United States faced a significant cyber incident on February 23, 2025, which severely impacted public service and government operations. The county's officials clarified that this act was not a cyber attack but originated from an outside source, prompting immediate recovery efforts. To manage the situation, county buildings were temporarily closed, reopening only on February 25, while ongoing investigations took place to determine the full extent and details of the incident. In response to the incident, county leaders imposed restrictions on internet access for employees to safeguard information and services. As the investigation progressed, county officials worked collaboratively with the Office of Information Technology, public safety personnel, and cybersecurity specialists to assess the breach and secure affected systems. By early March, most county services had been restored, albeit with some operations continuing through manual processes as a temporary workaround. Detailed information about the targeted operations and identities of the threat actors has yet to be disclosed, prioritizing the security of operations over immediate communications. County Executive Steuart Pittman revealed that internet access for onsite employees has gradually been reinstated for crucial business processes, indicating progress in recovery from the incident. Nonetheless, the exact nature of the threat and whether any sensitive data was compromised remains unclear. In light of the growing trend of cyber attacks on municipalities and healthcare systems, experts like Markus Rauschecker, Executive Director of the University of Maryland's Center for Health and Homeland Security, pointed out the increased targeting of such critical organizations by cyber criminals, underscoring the urgent need for heightened cybersecurity measures. As the county moves forward in restoring services and enhancing security protocols, it prepares to inform the public about the incident's specifics once appropriate. This situation highlights the vulnerabilities faced by local governments and the requirement for effective strategies to combat the risks posed by cyber threats in an evolving digital landscape.