Ransomware Attack Targets Georgia’s Real Estate Record System
On December 16, 2025, the Georgia Superior Court Clerks’ Cooperative Authority (GSCCCA) confirmed it had fallen victim to a ransomware attack. The incident disrupted access to the state’s real estate record index, a critical database used for property transactions and legal filings.
A ransomware group publicly claimed responsibility for the attack, though details about the specific strain or demands remain undisclosed. The GSCCCA, which oversees court records and land documents for Georgia’s 159 counties, has not confirmed whether data was exfiltrated or encrypted. Officials are investigating the extent of the breach, but the attack has already caused delays in real estate closings and title searches across the state.
The incident highlights vulnerabilities in public-sector cybersecurity, particularly for systems managing sensitive legal and financial records. No timeline for full restoration has been provided.
Source: https://www.bizjournals.com/atlanta/news/2025/11/25/ransomware-group-claims-attack-on-gsccca.html
GSCCCA cybersecurity rating report: https://www.rankiteo.com/company/gsccca
"id": "GSC1768408758",
"linkid": "gsccca",
"type": "Ransomware",
"date": "12/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Legal/Government',
'location': 'Georgia, USA',
'name': "Georgia Superior Court Clerks' Cooperative "
'Authority',
'type': 'Government Authority'}],
'data_breach': {'type_of_data_compromised': 'Real estate record index'},
'date_publicly_disclosed': '2025-12-16',
'description': "The Georgia Superior Court Clerks' Cooperative Authority has "
'been allegedly hit by a ransomware attack. A ransomware group '
"claims responsibility for the attack on Georgia's real estate "
'record index.',
'references': [{'date_accessed': '2025-12-16',
'source': 'Atlanta Business Chronicle'}],
'title': "Ransomware Attack on Georgia Superior Court Clerks' Cooperative "
'Authority',
'type': 'ransomware'}