Shelbyville Police Department (Kentucky, USA)

The Shelbyville Police Department in Shelby County, Kentucky, suffered a ransomware attack in October 2025, attributed to the Interlock ransomware gang. The attack disrupted the department’s computer network, and the gang claimed to have stolen 208 GB of data, including police camera recordings. Sample images of stolen files were posted on Interlock’s leak site as proof. The breach’s full scope remains unverified, including whether sensitive personal or operational data (e.g., citizen records, internal investigations, or officer details) was compromised. The department has not confirmed ransom payment or the attack vector. Given the target a law enforcement agency the incident poses risks to public safety operations, potential fraud or identity theft for affected individuals, and operational downtime for critical services like emergency dispatch or evidence management. Interlock, known for double-extortion tactics (data theft + system encryption), has previously targeted government entities, amplifying concerns about systemic vulnerabilities in public sector cybersecurity. The attack aligns with a broader 2025 trend of 68 confirmed ransomware incidents against U.S. government bodies, often leading to prolonged disruptions and reputational damage.

Source: https://www.comparitech.com/news/ransomware-gang-says-it-hacked-the-shelbyville-ky-police-stole-data/

TPRM report: https://www.rankiteo.com/company/shelbyville-police-department-ky

"id": "she2502725110625",
"linkid": "shelbyville-police-department-ky",
"type": "Ransomware",
"date": "10/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'public safety',
                        'location': 'Shelby County, Kentucky, USA',
                        'name': 'Shelbyville Police Department',
                        'size': '35 sworn officers; serves ~18,000 residents',
                        'type': 'government (law enforcement)'}],
 'data_breach': {'data_exfiltration': 'claimed (208 GB)',
                 'sensitivity_of_data': 'high (law enforcement data)',
                 'type_of_data_compromised': ['police camera recordings',
                                              'potentially other sensitive law '
                                              'enforcement data']},
 'date_detected': '2025-10-15',
 'date_publicly_disclosed': '2025-10-15',
 'description': 'The ransomware gang Interlock claimed responsibility for a '
                'cyber attack on the Shelbyville Police Department in Shelby '
                'County, Kentucky, in October 2025. The attack disrupted the '
                'department’s computer network, and Interlock alleged it stole '
                '208 GB of data, including police camera recordings. The '
                'department has not verified the claim, and details such as '
                'compromised data, ransom payment, and breach method remain '
                'unknown.',
 'impact': {'brand_reputation_impact': 'potential reputational damage due to '
                                       'data breach and operational disruption',
            'data_compromised': ['police camera recordings',
                                 '208 GB of unspecified data'],
            'identity_theft_risk': 'possible (if PII was included in stolen '
                                   'data)',
            'operational_impact': 'disruption of police department systems',
            'systems_affected': ['computer network']},
 'initial_access_broker': {'high_value_targets': ['police camera recordings',
                                                  'law enforcement data']},
 'investigation_status': 'ongoing (unverified claims by Interlock; department '
                         'has not confirmed details)',
 'motivation': 'financial (ransom)',
 'ransomware': {'data_encryption': 'likely (standard ransomware operation)',
                'data_exfiltration': 'claimed (208 GB)',
                'ransomware_strain': 'Interlock'},
 'references': [{'source': 'WAVE (local news)'},
                {'source': 'Comparitech'},
                {'source': 'Interlock data leak site'}],
 'response': {'communication_strategy': 'public announcement by Police Chief '
                                        'Bruce Gentry; no further details '
                                        'provided'},
 'threat_actor': 'Interlock',
 'title': 'Ransomware Attack on Shelbyville Police Department by Interlock',
 'type': ['ransomware', 'data breach']}