Ransomware Attack Disrupts Jackson County Sheriff’s Office Operations in Indiana
A ransomware attack last week crippled the Jackson County Sheriff’s Office in Brownstown, Indiana, knocking its entire network offline and forcing critical law enforcement operations to adapt. Dispatchers were relocated to the Seymour Police Department to use their computers, while officers resorted to filing reports in Microsoft Word after the department’s standard system became inaccessible.
According to Lt. Adam Nicholson, the attack detected the prior week disabled computers, Wi-Fi, and the police report filing system. Nicholson confirmed to the Indiana Daily Student on March 25 that the malware likely entered via email and may have lain dormant before activating, though this has not been independently verified. The FBI’s Indianapolis field office and the Indiana Department of Homeland Security declined to comment on their involvement.
The incident put sensitive data at risk, including files tied to the county’s sex offender registry. Nicholson stated that recovery efforts were uncertain, with external hard drives potentially offering limited restoration. The sheriff’s office is wiping affected systems, replacing hardware, and rebuilding infrastructure refusing to pay the ransom. Officials aim to restore the report filing system by next week, though a full recovery timeline remains unclear.
The attack mirrors recent cyber incidents targeting county governments, including ransomware disruptions in Tennessee’s DeKalb County, Minnesota’s Winona County, and New Jersey’s Passaic County earlier this year. Jackson County, home to 46,428 residents as of the 2020 Census, has not disclosed whether data was exfiltrated or when full access to records will be restored. The sheriff’s Facebook page was also unavailable, though no direct link to the attack has been confirmed.
Source: https://dysruptionhub.com/jackson-county-sheriff-ransomware-indiana/
Jackson County Sheriff cybersecurity rating report: https://www.rankiteo.com/company/jackson-county-sheriff
"id": "JAC1790872901",
"linkid": "jackson-county-sheriff",
"type": "Ransomware",
"date": "3/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '46,428 residents (county '
'population)',
'industry': 'Law Enforcement',
'location': 'Brownstown, Indiana, USA',
'name': 'Jackson County Sheriff’s Office',
'type': 'Government'}],
'attack_vector': 'Email',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Sensitive law enforcement data, '
'sex offender registry files'},
'date_publicly_disclosed': '2024-03-25',
'description': 'A ransomware attack last week crippled the Jackson County '
'Sheriff’s Office in Brownstown, Indiana, knocking its entire '
'network offline and forcing critical law enforcement '
'operations to adapt. Dispatchers were relocated to the '
'Seymour Police Department to use their computers, while '
'officers resorted to filing reports in Microsoft Word after '
'the department’s standard system became inaccessible.',
'impact': {'data_compromised': 'Sensitive data, including files tied to the '
'county’s sex offender registry',
'operational_impact': 'Dispatchers relocated, officers filing '
'reports manually, sheriff’s Facebook page '
'unavailable',
'systems_affected': 'Entire network, computers, Wi-Fi, police '
'report filing system'},
'initial_access_broker': {'entry_point': 'Email'},
'investigation_status': 'Ongoing',
'post_incident_analysis': {'corrective_actions': 'System wiping, hardware '
'replacement, infrastructure '
'rebuilding',
'root_causes': 'Likely dormant malware in email'},
'ransomware': {'data_encryption': 'Yes', 'ransom_paid': 'No'},
'references': [{'date_accessed': '2024-03-25',
'source': 'Indiana Daily Student'}],
'response': {'containment_measures': 'Systems wiped, hardware replaced, '
'infrastructure rebuilding',
'law_enforcement_notified': 'FBI’s Indianapolis field office, '
'Indiana Department of Homeland '
'Security (declined to comment)',
'recovery_measures': 'Aim to restore report filing system by '
'next week',
'remediation_measures': 'Refusal to pay ransom, external hard '
'drives used for limited restoration'},
'title': 'Ransomware Attack Disrupts Jackson County Sheriff’s Office '
'Operations',
'type': 'Ransomware'}