SecurityWeekMike Lennon
Nevada Confirms Ransomware Attack Behind Statewide Service Disruptions
Nevada on 29 August 2025 confirmed that a ransomware attack caused days-long disruption to state systems and services, with offices closed on Monday and Tuesday as a result. The incident, first disclosed as a network security incident, occurred on Sunday and led to the temporary shutdown of several state operations, including the Access Nevada portal.
During a press conference on Wednesday, state officials described the incident as a “sophisticated ransomware attack” and said they activated their cybersecurity incident response plan, isolating and taking certain systems offline. Tim Galluzi, Executive Director of the Governor’s Technology Office, said the hackers exfiltrated data from the state’s network, though it is too early to identify or classify what was stolen.
The response involves forensic experts and law enforcement, with the US cybersecurity agency CISA fully engaged to restore lifesaving services and rebuild affected systems. Some state offices have resumed operations while others remain offline or reliant on pen-and-paper processes, and certain services such as DMV operations have yet to be fully restored.