CodeRED Emergency Notification System Incident Update

St. Mary’s County reports that the legacy OnSolve CodeRED emergency alert system suffered a ransomware attack (initial access Oct 31, 2025; deployment Nov 10) that disrupted notifications nationwide for roughly two weeks; INC Ransom claimed responsibility. Exposed data was limited to small sets of usernames, phone numbers, and either outdated inactive passwords or unreadable encrypted passwords—no names, addresses, active passwords, or encryption keys were involved. OnSolve did not pay a ransom, some old data was leaked, and the legacy platform was decommissioned and replaced by CodeRED by Crisis24, with some customers exploring alternative vendors.