Residents of Cuyahoga County are facing an unnerving digital threat as the Emergency Alert System Cybersecurity Incident has taken center stage. The OnSolve CodeRED platform, a third-party system used by the County to transmit crucial alerts and notifications, has fallen prey to a cybersecurity incident, potentially leaking subscriber information of its ReadyNotify service. As the system is utilized by many participating municipalities, the ripple of concern is felt far and wide, according to Cuyahoga County.
This stark revelation came to light on Tuesday when the Office of Emergency Management unearthed the disconcerting breach. Despite being under the operation of Crisis24, it's crucial to note that the CodeRED platform operates independently, maintaining a separation from any County IT platforms. Crisis24 has yet to unveil the full scope of the security breach, leaving the information vacuum to be filled with residents' anxiety. The data stored within the system includes names, addresses, phone numbers, email addresses, and subscription lists—sans the financially sensitive or otherwise deeply personal information.
In response to the breach, the County has issued a clarion call to its citizens, urging those enrolled in the ReadyNotify system to fortify their digital defenses. Actions such as resetting passwords for ReadyNotify accounts and any other accounts with similar credentials, enabling multi-factor authentication, and surveilling financial accounts for odd activity are now not just recommended—they are a cyber hygiene necessity. This proactive stance is intended to shield individuals from the potential domino effect of cyber malfeasance.
Finally, the County cautions that suspicious or unlawful activity correlating with this incident should be promptly reported to law enforcement. The path forward is paved with vigilance, residents subscribed to ReadyNotify must heed the guidance dispensed by the County for the safety of their virtual selves. The onus of such responsibility, while heavy, symbolizes a collective stride towards reclaiming a semblance of digital security in the aftermath of this virtual trespass.
