CodeRED Emergency Alert Platform Shut Down Following Cyberattack

CodeRED emergency notifications have been shut down after a cyberattack, with Crisis24’s parent GardaWorld Corporation saying the OnSolve CodeRED platform was decommissioned after damage to the CodeRED environment. The Inc ransomware gang claimed responsibility, stating that access began on 1 November and that files were encrypted on 10 November, with negotiations over a $100,000 payment reportedly rejected.

GardaWorld also said the incident was contained within the compromised environment and that all customers have moved to the new CodeRED by Crisis24, which now operates in a non-compromised, separate environment following a security audit. The attackers published samples on 23 November, and the leaked data allegedly includes subscribers’ names, addresses, email addresses, phone numbers and passwords for CodeRED accounts, though GardaWorld had not yet confirmed the origin of the published data at press time.

Local authorities reported varying responses, with some governments indicating disruption but emphasising that 911 operations were not impacted. The report is by Rob Wright, and was published on 1 December 2025.