**Weld County’s Emergency Alert System Restored After Cyber Attack Disrupts CodeRED**
Weld County, Colorado, has restored its emergency notification system following a cyber attack that disabled its previous platform, CodeRED. The incident, detected on November 10, prompted the county’s Public Safety Communications Department to rely on a backup agreement with the Larimer Emergency Telephone Authority for critical alerts.
CodeRED’s parent company, GardaWorld, confirmed the attack was contained to its platform and did not affect other systems. Subscribers were automatically transferred to a new system, with those registered as of March already migrated. GardaWorld advised users to update passwords for any accounts sharing the same credentials.
While the new system has undergone a security audit, Weld County continues to evaluate long-term solutions for emergency alerts. For now, the Integrated Public Alert and Warning System (IPAWS)—which sends notifications to all cellphones in targeted areas—will be managed through Larimer’s authority.
Residents can still register for alerts via accountportal.onsolve.net/weldcountyco. The incident highlights vulnerabilities in critical public safety infrastructure and the importance of redundant notification systems.
Source: https://www.govtech.com/security/weld-county-colo-alerts-are-back-online-after-cyber-attack
Larimer Emergency Telephone Authority TPRM report: https://www.rankiteo.com/company/larimer-county
Crisis24 TPRM report: https://www.rankiteo.com/company/gardaworld-crisis24
GardaWorld TPRM report: https://www.rankiteo.com/company/gardaworld-crisis24
Weld County Public Safety Communications Department TPRM report: https://www.rankiteo.com/company/weld-county
"id": "largargarwel1766202895",
"linkid": "larimer-county, gardaworld-crisis24, gardaworld-crisis24, weld-county",
"type": "Cyber Attack",
"date": "12/2025",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"{'affected_entities': [{'customers_affected': 'Subscribers to CodeRED '
'emergency notification system',
'industry': 'Public Safety/Emergency Services',
'location': 'Weld County, Colorado, USA',
'name': 'Weld County Public Safety Communications '
'Department',
'type': 'Government'},
{'customers_affected': 'Subscribers as of March 2023',
'industry': 'Emergency Notification Services',
'name': 'Crisis24 (CodeRED)',
'type': 'Private Company'},
{'industry': 'Security Services',
'name': 'GardaWorld',
'type': 'Private Company'}],
'customer_advisories': 'Residents encouraged to register for the new '
'emergency alert system at '
'accountportal.onsolve.net/weldcountyco',
'data_breach': {'personally_identifiable_information': 'Potential credential '
'exposure due to '
'password reuse '
'advisory'},
'date_detected': '2023-11-11',
'description': 'Weld County’s emergency notification system (CodeRED) went '
'offline due to a cyber attack. The system was transferred to '
'a new platform after the incident, and subscribers were '
'migrated. The attack was contained to the CodeRED platform, '
'and affected users were advised to change passwords for other '
'accounts using the same credentials.',
'impact': {'downtime': 'Since 2023-11-10',
'identity_theft_risk': 'Users advised to change passwords due to '
'potential credential reuse',
'operational_impact': 'Emergency notifications were disrupted; '
'backup system (Larimer Emergency Telephone '
'Authority) was used',
'systems_affected': 'CodeRED emergency notification system'},
'post_incident_analysis': {'corrective_actions': 'Comprehensive security '
'audit of the new system; '
'backup notification system '
'used during downtime'},
'recommendations': 'Users advised to change passwords for other accounts '
'where the same credentials were used',
'references': [{'source': 'GardaWorld Statement'},
{'source': 'Weld County News Release'}],
'response': {'communication_strategy': 'County news release; statement from '
'GardaWorld; advisory to change '
'passwords',
'containment_measures': 'CodeRED platform taken offline; attack '
'contained to the platform',
'recovery_measures': 'Backup system (Larimer Emergency Telephone '
'Authority) used for emergency '
'notifications; new system implemented',
'remediation_measures': 'Subscribers migrated to a new system; '
'comprehensive security audit conducted '
'on the new system'},
'stakeholder_advisories': 'Advisory to change passwords due to potential '
'credential exposure',
'title': 'Cyber Attack on CodeRED Emergency Notification System',
'type': 'Cyber Attack'}