Sweet Grass authorities have been notified that users of CodeRED alerting platform may be affected by a security breach earlier this month. Sweet Grass County contracted with CodeRED several years ago to provide a platform to allow us to send alerts and warnings to the residents of Sweet Grass County and the City of Big Timber. We have inserted the following information sent to us by CodeRED representatives. Please carefully read the section that gives you, the user, certain instructions that are recommended as actions on your part as soon as you can complete them.

CodeRED extends their apologies. As we learn more, we will pass the information on to you as a user.

The parent company of CodeRED has set us up with a different account in a different platform. Sweet Grass County has access to that account in the event we need to send out alerts and warnings. That platform is called CodeRED by Crisis24.

Cliff Brophy, DES Coordinator

FROM CODE RED:

Dear Customer,

We wanted to provide an update following the cybersecurity incident that damaged the OnSolve CodeRED platform. Currently, our forensic investigation remains ongoing, and we anticipate this to remain the case for the near term. We have notified law enforcement, and we will continue to keep you promptly updated of any meaningful developments.

What we know today:

• An organized cybercriminal group has claimed responsibility for this incident that has victimized our platform and our customers. Law enforcement has been notified.
• We believe that data associated with the OnSolve CodeRED platform was removed from our systems. In the regular course of business, our platform is typically used to provide mass notification emergency alerts and requires only basic contact information about subscribers used to provide such alerts. While data appears to have been published online, we are still determining whether it actually came from our systems, and we cannot confirm the scope or exact elements at this time.
• We have decommissioned the OnSolve CodeRED platform. It will not be made available.
• This incident was contained to the OnSolve CodeRED environment with no contagion beyond.

Actions we encourage you to take immediately:

Inform your residents that the data removed may include information for OnSolve CodeRED subscribers. Subscribers who have reused their OnSolve CodeRED password for any other personal or business accounts should change those passwords immediately.