Crisis24

The cyberattack on **Crisis24** disrupted its **CodeRED emergency alert system**, a critical infrastructure used by towns and cities across the U.S. to disseminate life-saving alerts during emergencies. The attack rendered the system completely inaccessible, preventing the transmission of crucial warnings (e.g., severe weather, active threats, or public safety advisories). This failure introduced **severe delays in emergency responses**, strained local resources, and forced municipalities to rely on manual, less efficient communication methods. The incident eroded trust in Crisis24’s reliability, leading some regions to **terminate contracts** and seek alternative providers. Beyond operational chaos, the attack exposed vulnerabilities in third-party dependencies for public safety infrastructure, prompting widespread audits of cybersecurity frameworks. The disruption underscored the systemic risk of cyber threats to emergency services, with potential cascading effects on public trust, crisis management, and even life-endangering scenarios if alerts (e.g., for fires, shootings, or natural disasters) fail to reach affected populations. The long-term impact includes **increased cybersecurity investments**, contractual scrutiny, and a shift toward more resilient, decentralized alert systems.

Source: https://dailysecurityreview.com/cyber-security/codered-emergency-alert-system-cyberattack-leaves-us-regions-vulnerable/

NYA cybersecurity rating report: https://www.rankiteo.com/company/gardaworld-crisis24

"id": "GAR3433634112725",
"linkid": "gardaworld-crisis24",
"type": "Cyber Attack",
"date": "11/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'customers_affected': 'multiple towns and cities '
                                              'across the U.S.',
                        'industry': 'public safety/emergency management',
                        'location': 'United States (nationwide impact)',
                        'name': 'Crisis24',
                        'type': 'private company (emergency alert system '
                                'provider)'},
                       {'customers_affected': 'residents relying on CodeRED '
                                              'alerts',
                        'industry': 'public sector',
                        'location': 'United States',
                        'name': 'Multiple U.S. towns and cities',
                        'type': 'local governments'}],
 'customer_advisories': ['Public notifications about potential delays in '
                         'emergency alerts',
                         'Guidance on alternative communication channels '
                         'during outages'],
 'description': 'Towns and cities across the United States are experiencing '
                'severe disruptions to their CodeRED emergency alert system '
                'following a cyberattack targeting Crisis24, the system’s '
                'provider. The incident has left numerous regions vulnerable, '
                'with significant obstacles in communicating crucial alerts '
                'during emergencies. The attack has prompted contract '
                'reevaluations, heightened scrutiny of third-party vendor '
                'reliability, and calls for strengthened cybersecurity '
                'measures in public safety infrastructure.',
 'impact': {'brand_reputation_impact': ['loss of confidence in Crisis24',
                                        'contract rescissions by some '
                                        'municipalities'],
            'downtime': 'ongoing (as of report)',
            'operational_impact': ['complete inaccessibility to CodeRED for '
                                   'critical alerts',
                                   'heightened risk of delayed emergency '
                                   'responses',
                                   'increased pressure on local emergency '
                                   'management resources'],
            'systems_affected': ['CodeRED emergency alert system']},
 'initial_access_broker': {'high_value_targets': ['CodeRED emergency alert '
                                                  'system']},
 'investigation_status': 'ongoing (as of report)',
 'lessons_learned': ['Critical vulnerability in public safety communications '
                     'infrastructure exposed',
                     'Over-reliance on third-party vendors for key '
                     'infrastructure poses significant risks',
                     'Need for municipalities to reassess cybersecurity '
                     'posture and vendor contracts',
                     'Proactive measures and technological advancements are '
                     'essential for resilience against cyber threats'],
 'post_incident_analysis': {'corrective_actions': ['Municipalities conducting '
                                                   'cybersecurity framework '
                                                   'audits',
                                                   'Seeking more resilient '
                                                   'emergency alert systems',
                                                   'Increasing cybersecurity '
                                                   'investments'],
                            'root_causes': ['Unspecified cyberattack targeting '
                                            "Crisis24's infrastructure",
                                            'Potential vulnerabilities in '
                                            "CodeRED system's cybersecurity "
                                            'defenses']},
 'recommendations': ['Conduct comprehensive audits of cybersecurity frameworks '
                     'for emergency systems',
                     'Seek alternative, more resilient emergency alert systems',
                     'Increase investments in cybersecurity to prevent future '
                     'disruptions',
                     'Adopt a coordinated approach to safeguarding vital '
                     'emergency communication systems',
                     'Prioritize cybersecurity in contractual negotiations '
                     'with third-party vendors',
                     'Foster stronger, more secure networks for public safety '
                     'infrastructure'],
 'references': [{'source': 'Cyber Incident Report (Generic)'}],
 'response': {'communication_strategy': ['public disclosures about system '
                                         'disruptions',
                                         'advisories to municipalities about '
                                         'contract reevaluations'],
              'enhanced_monitoring': ['detailed audits of existing '
                                      'cybersecurity frameworks (by '
                                      'municipalities)',
                                      'increased investments in cybersecurity '
                                      'measures']},
 'stakeholder_advisories': ['Reevaluate contracts with Crisis24',
                            'Enhance cybersecurity measures for emergency '
                            'systems',
                            'Explore alternative emergency alert providers'],
 'title': "Cyberattack on Crisis24's CodeRED Emergency Alert System Disrupts "
          'Public Safety Communications Across U.S. Towns and Cities',
 'type': ['cyberattack',
          'system disruption',
          'emergency communication failure']}