Cyber-Attack Disrupts OnSolve CodeRED Emergency Notification System

A ransomware incident targeting OnSolve's CodeRED emergency notification platform disrupted services for state and local agencies across the US, forced Crisis24 to shut down and rebuild its legacy environment, and resulted in confirmed data theft that the INC Ransom group claims to be selling on the dark web. The attack affected municipalities across 15 states, included published screenshots allegedly showing clear-text passwords, and required restoration from March 31, 2025 backups which caused some missing user accounts.