City of Tigard: Cybersecurity ‘incident’ leads to potential data breach for Tigard CodeRED subscribers

**Cybersecurity Incident Exposes Personal Data in Tigard’s CodeRED Alert System**

The City of Tigard, Oregon, announced a cybersecurity incident affecting its public safety alert system, CodeRED, which may have exposed subscribers’ personal information. The breach, linked to a disruption at vendor OnSolve (Crisis24), potentially compromised data including names, email addresses, passwords, phone numbers, and physical addresses.

The incident, disclosed on Tuesday, impacted multiple jurisdictions nationwide, as OnSolve’s service disruption extended beyond Tigard. While the city advised users with CodeRED account passwords to change them—and any reused passwords—it confirmed no action was required for those without an account password. Subscribers uncertain about their account status were directed to contact OnSolve’s customer service.

The breach highlights ongoing risks in third-party vendor security, with local governments and organizations across the U.S. affected by the incident.

Source: https://www.kptv.com/2025/12/09/cybersecurity-incident-leads-potential-data-breach-tigard-codered-subscribers/

City of Tigard cybersecurity rating report: https://www.rankiteo.com/company/city-of-tigard

"id": "CIT1765324945",
"linkid": "city-of-tigard",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'CodeRED subscribers',
                        'industry': 'Public Safety',
                        'location': 'Tigard, Oregon, USA',
                        'name': 'City of Tigard',
                        'type': 'Government'},
                       {'customers_affected': 'Multiple jurisdictions '
                                              'nationwide',
                        'industry': 'Cybersecurity/Alert Systems',
                        'name': 'OnSolve (Crisis24)',
                        'type': 'Vendor'}],
 'customer_advisories': 'Urged password changes and provided contact for '
                        'OnSolve customer service',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'Personally Identifiable Information '
                                        '(PII)',
                 'type_of_data_compromised': ['Name',
                                              'Email address',
                                              'Password',
                                              'Phone number',
                                              'Address']},
 'description': 'A cybersecurity incident affecting the City of Tigard’s '
                'public safety alert system, CodeRED, may have exposed '
                'subscribers’ personal information. The incident is tied to '
                'OnSolve (Crisis24), the vendor hosting CodeRED, and disrupted '
                'service nationwide, affecting multiple jurisdictions.',
 'impact': {'data_compromised': 'Personal information of CodeRED subscribers',
            'downtime': 'Disrupted service nationwide',
            'identity_theft_risk': 'Possible',
            'operational_impact': 'Service disruption to public safety alert '
                                  'system',
            'systems_affected': 'CodeRED public safety alert system'},
 'recommendations': 'Change passwords for CodeRED accounts and other accounts '
                    'using the same password',
 'references': [{'source': 'KPTV-KPDX'}],
 'response': {'communication_strategy': 'Public announcement and advisory to '
                                        'change passwords',
              'remediation_measures': 'Urged password changes for affected '
                                      'accounts'},
 'title': 'CodeRED Cybersecurity Incident Affecting City of Tigard',
 'type': 'Data Breach'}