State and Local Government Cyber Attacks

**Executive Summary:** State and local government entities are increasingly targeted by ransomware, business email compromise (BEC), and phishing due to limited budgets and skilled staff, a large and interconnected attack surface, and widespread cloud adoption; recent examples include ransomware incidents affecting Kansas City-area entities and Macon-Bibb County. The report provides practical mitigations—24x7 monitoring and managed detection and response, identity and access management with MFA, security awareness training, incident response planning, and seeking cybersecurity grant funding—to improve resilience.