Iowa County Real Estate Transactions Halted After Ransomware Attack Destroys Critical Data
A ransomware attack on Iowa County, Wisconsin, has disrupted real estate transactions by deleting essential network data, including property titles needed for closings. The incident, detected on April 28, 2025, forced county officials to disconnect affected systems and launch an investigation, revealing that threat actors intentionally wiped portions of the network including some backups.
While the county recovered much of its data from preserved backups, the loss of certain files has triggered delays in property closings, leaving buyers, sellers, and realtors in limbo. Christina Weitzel, a RE/MAX realtor covering Iowa County, reported that 15 of her clients and likely hundreds countywide are affected, with some facing financial strain from holding costs on unsold properties or dual mortgages after purchasing second homes before closing on their first.
The county’s written statement acknowledged the attack’s severity, noting ongoing efforts to rebuild destroyed systems and restore services securely. However, officials provided no timeline for resolution, leaving affected parties frustrated. Weitzel emphasized the growing urgency, warning that patience may wear thin if delays extend beyond another month.
The investigation remains active, with no further details on the attackers or their motives. Iowa County continues to monitor systems for additional threats while working to restore operations.
Johnson County Iowa cybersecurity rating report: https://www.rankiteo.com/company/johnson-county-iowa
REMAX cybersecurity rating report: https://www.rankiteo.com/company/remax
"id": "JOHREM1770865850",
"linkid": "johnson-county-iowa, remax",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Hundreds of buyers, sellers, '
'and realtors (e.g., 15 clients '
'of RE/MAX realtor Christina '
'Weitzel)',
'industry': 'Public Administration',
'location': 'Iowa County, Wisconsin, USA',
'name': 'Iowa County, Wisconsin',
'type': 'Government'}],
'data_breach': {'sensitivity_of_data': 'High (property titles, real estate '
'transaction data)',
'type_of_data_compromised': 'Property titles, network data, '
'backups'},
'date_detected': '2025-04-28',
'description': 'A ransomware attack on Iowa County, Wisconsin, has disrupted '
'real estate transactions by deleting essential network data, '
'including property titles needed for closings. The incident '
'forced county officials to disconnect affected systems and '
'launch an investigation, revealing that threat actors '
'intentionally wiped portions of the network including some '
'backups. While much of the data was recovered from preserved '
'backups, the loss of certain files has triggered delays in '
'property closings, affecting buyers, sellers, and realtors.',
'impact': {'data_compromised': 'Essential network data, including property '
'titles and backups',
'operational_impact': 'Disruption of real estate transactions, '
'delays in property closings',
'systems_affected': 'County real estate transaction systems'},
'investigation_status': 'Active',
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'County issued a written statement '
'acknowledging the attack',
'containment_measures': 'Disconnected affected systems',
'enhanced_monitoring': 'Monitoring systems for additional '
'threats',
'incident_response_plan_activated': 'Yes',
'recovery_measures': 'Ongoing efforts to restore services '
'securely',
'remediation_measures': 'Data recovery from preserved backups, '
'rebuilding destroyed systems'},
'title': 'Iowa County Real Estate Transactions Halted After Ransomware Attack '
'Destroys Critical Data',
'type': 'Ransomware'}