Nevada Ransomware Attack Started Months Before It Was Discovered, Per Report

The Nevada ransomware attack was discovered in August but began as early as May when a state employee downloaded malicious software, according to the after-action report released by the state. The incident reportedly cost at least $1.5 million to recover, with $1.3 million paid for contractor help and about $211,000 in direct overtime wages, the report notes. Nevada officials said the state did not pay the ransom, and the attacker has yet to be identified, with the case still under investigation.

The attack highlighted the state’s decentralised cyber systems and the speed at which the breach spread, and the report recommends establishing a centrally-managed security operations centre and deploying endpoint detection and response. The full account, written by Associated Press, quotes several security experts who described the event as a fairly large ransomware incident against a state, and notes Nevada’s response time was comparatively quick. according to Associated Press. 6 November 2025.