A sophisticated ransomware attack struck Nevada’s state government systems on Sunday, disrupting critical public services, including the DMV, Division of Welfare and Supportive Services (DWSS), and social services offices. The attack forced officials to take systems offline to contain the threat, halting operations like SNAP food benefits, Medicaid processing, childcare/energy assistance, and new benefit enrollments. Citizens, including vulnerable populations like Marlen Garcia (a mother of four) and Lauri Taylor (a disabled individual), faced immediate hardships delayed food/utility aid, unprocessed insurance claims, missed medical appointments, and financial penalties due to inaccessible services.Investigators confirmed data exfiltration by malicious actors, though the scope (e.g., citizen vs. employee data) remains undisclosed. The attack’s ripple effects included operational outages, reputational damage from press coverage, and potential long-term financial/health consequences for residents. Federal agencies (e.g., FBI) are assisting in the ongoing criminal probe, but recovery timelines are uncertain. The incident underscores the systemic vulnerability of government infrastructure and its direct impact on public welfare, with services partially restored in a piecemeal fashion (e.g., Turbo Titles online) while core functions remain paralyzed.
TPRM report: https://www.rankiteo.com/company/state-of-nevada-division-of-welfare-and-support-services
"id": "sta803090225",
"linkid": "state-of-nevada-division-of-welfare-and-support-services",
"type": "Ransomware",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Residents relying on state '
'services (e.g., DMV, welfare, '
'Medicaid)',
'industry': 'public administration',
'location': 'Nevada, USA (including Carson City, Las '
'Vegas)',
'name': 'State of Nevada Government',
'type': 'government'},
{'customers_affected': 'All DMV service users',
'industry': 'transportation',
'location': 'Nevada, USA',
'name': 'Nevada Department of Motor Vehicles (DMV)',
'type': 'government agency'},
{'customers_affected': 'Residents applying for SNAP, '
'Medicaid, childcare assistance, '
'energy support, and job '
'services',
'industry': 'social services',
'location': 'West Las Vegas, Nevada, USA',
'name': 'Nevada Division of Welfare and Supportive '
'Services',
'type': 'government agency'}],
'customer_advisories': 'Residents advised to monitor updates; password '
'changes recommended for potentially affected '
'individuals',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': 'Potential '
'(unconfirmed)'},
'date_detected': '2023-XX-XXT00:00:00Z (Sunday morning, exact date not '
'specified)',
'date_publicly_disclosed': '2023-XX-XXT00:00:00Z (Wednesday, exact date not '
'specified)',
'description': 'A sophisticated ransomware attack disrupted Nevada state '
'government services, including the DMV and social services '
'offices. The attack, detected on Sunday morning, led to the '
'isolation of certain systems to prevent further spread. '
'Federal partners, including the FBI, are assisting in the '
'ongoing investigation. Evidence suggests some data was '
'exfiltrated from the state network, though specifics about '
'the compromised data or the threat actor remain undisclosed. '
'Services like new benefit sign-ups for SNAP, Medicaid, and '
'childcare assistance were temporarily halted, causing public '
'frustration. The state aims to restore full functionality '
'securely but has not provided a timeline for recovery.',
'impact': {'brand_reputation_impact': 'Negative (public frustration reported)',
'customer_complaints': True,
'data_compromised': True,
'downtime': 'Multiple days (since Sunday, ongoing as of Wednesday)',
'identity_theft_risk': 'Potential (data exfiltration confirmed, '
'but specifics unknown)',
'operational_impact': ['Disruption of new benefit sign-ups (SNAP, '
'Medicaid, childcare assistance, energy '
'support, job services)',
'Paperwork-only processing for welfare '
'services',
'Delayed insurance processing for '
'disability benefits',
'Public frustration due to inaccessible '
'critical services (e.g., food stamps, '
'utilities)'],
'systems_affected': ['DMV (including kiosks)',
'Nevada Division of Welfare and Supportive '
'Services (partial outage)',
'Turbo Titles (temporarily offline, later '
'restored online)',
'Rapid Register services (temporarily '
'offline, later restored online)',
'state network (data exfiltration '
'confirmed)']},
'investigation_status': 'Ongoing (federal and state agencies involved)',
'ransomware': {'data_exfiltration': True},
'recommendations': ['Password changes for affected individuals (recommended '
'by Dr. Mack Jackson, cybersecurity consultant)'],
'references': [{'source': 'Press conference by Nevada state officials (Carson '
'City)'},
{'source': 'Interview with Dr. Mack Jackson (cybersecurity '
'consultant and professor)'},
{'source': 'Public statements from affected residents (Marlen '
'Garcia, Annette Walker, Lauri Taylor)'}],
'response': {'communication_strategy': ['Press conference in Carson City',
'Public advisories about service '
'disruptions'],
'containment_measures': ['Isolation of affected systems',
'Taking certain systems offline to '
'prevent spread'],
'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': ['Gradual restoration of services (e.g., '
'Turbo Titles and Rapid Register restored '
'online)',
'Paperwork-only processing for welfare '
'services until systems are back'],
'third_party_assistance': ['FBI (Las Vegas office)',
'Federal partners (unspecified)']},
'stakeholder_advisories': 'Services like DMV and welfare offices are '
'partially operational; paper applications accepted '
'for welfare services',
'title': 'Ransomware Attack on Nevada State Government Systems',
'type': 'ransomware'}