CodeRED (Emergency Notification System)

The town of Surf City reported that **CodeRED**, an emergency notification system used to alert residents during critical events, suffered a **cyberattack-induced service outage**. The attack disrupted the platform’s software, temporarily impairing its ability to function normally. While Surf City maintained backup methods to issue emergency alerts, the incident exposed vulnerabilities in a system relied upon for public safety communications. CodeRED announced a new platform launch to restore full service, but the breach necessitated password resets for users due to potential credential exposure. The attack did not result in direct data theft or financial loss but **compromised the integrity of a critical public warning infrastructure**, risking delayed or failed emergency notifications. The incident highlights the broader threat to **municipal and governmental services** that depend on third-party digital systems for life-saving communications. No ransom demands or permanent data loss were reported, but the disruption underscored the fragility of cyber-physical safety networks.

Source: https://www.wect.com/2025/11/26/surf-city-warns-residents-after-cyberattack-impacts-codered-emergency-alert-system/

Emergency Communications Network cybersecurity rating report: https://www.rankiteo.com/company/emergency-communications-network-llc

"id": "EME2692826112625",
"linkid": "emergency-communications-network-llc",
"type": "Cyber Attack",
"date": "11/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'customers_affected': 'Residents subscribed to CodeRED '
                                              'alerts (exact number '
                                              'unspecified)',
                        'industry': 'Public Administration',
                        'location': 'Surf City, North Carolina, USA',
                        'name': 'Town of Surf City, N.C.',
                        'type': 'Municipal Government'},
                       {'industry': 'Emergency Communication Services',
                        'name': 'CodeRED (OnSolve)',
                        'type': 'Private Company'}],
 'customer_advisories': ['Password change recommendation',
                         'Assurance that critical notifications were not '
                         'interrupted'],
 'date_resolved': '2025-11-28',
 'description': 'The town of Surf City reported a cyberattack affecting the '
                'CodeRED emergency notification system, causing a service '
                'outage. CodeRED is used to send alerts and updates to '
                'residents during emergencies. While the system experienced an '
                'outage, Surf City maintained the ability to issue critical '
                'notifications. A new notification platform is set to launch '
                'on November 28, restoring full service. Users are advised to '
                'change passwords similar to their CodeRED credentials.',
 'impact': {'brand_reputation_impact': 'Potential erosion of trust in '
                                       'emergency notification reliability; '
                                       'proactive communication mitigated some '
                                       'risk',
            'downtime': {'duration': None, 'end': '2025-11-28', 'start': None},
            'operational_impact': 'Partial disruption of emergency '
                                  'notification services (non-critical '
                                  'notifications may have been delayed, but '
                                  'critical alerts remained functional)',
            'systems_affected': ['CodeRED emergency notification system']},
 'investigation_status': 'Ongoing (implied by planned restoration and lack of '
                         'detailed root cause)',
 'post_incident_analysis': {'corrective_actions': ['Deployment of a new '
                                                   'notification platform']},
 'recommendations': ['Users advised to change passwords that are the same or '
                     'similar to their CodeRED platform password',
                     'Regular password updates and multi-factor authentication '
                     '(implied)'],
 'references': [{'source': 'WECT News',
                 'url': 'https://www.wect.com/2025/11/xx/surf-city-warns-of-cyberattack-affecting-codered-system/'},
                {'source': 'Town of Surf City Facebook Post'}],
 'response': {'communication_strategy': ['Public announcement via Facebook '
                                         'post',
                                         'Advisory for users to change '
                                         'passwords',
                                         'Media coverage (WECT news report)'],
              'containment_measures': ['Maintained ability to send critical '
                                       'notifications despite outage'],
              'incident_response_plan_activated': True,
              'recovery_measures': ['Full service restoration planned for '
                                    '2025-11-28'],
              'remediation_measures': ['Launch of new notification platform on '
                                       '2025-11-28']},
 'stakeholder_advisories': ['Public advisory to change passwords',
                            'Notification of new platform launch on '
                            '2025-11-28'],
 'title': 'Cyberattack on CodeRED Emergency Notification System in Surf City, '
          'N.C.',
 'type': 'Cyberattack (Service Disruption)'}