An October 10 cyberattack affected Heber City's municipal IT network, but police records, emergency dispatch and the city website remained available, Mayor Heidi Franco and Police Chief Parker Sever said. City systems have since been restored, while the FBI is working with local officials to determine the scope of the incident.
Municipal systems were restored by the following Thursday after containment, according to DysruptionHub. The Park Record reported that Franco said the systems were back online and ready to serve residents. She said no public information was at risk and that software for most city systems was safe, while the city continued to seek information and address the breach's aftermath.
What Was Spared, According to Officials
Officials said the incident did not interrupt police operations. Police records are stored separately from the city and accessed through county servers, Sever said; the department continued to receive calls for service and file reports, and its vehicle laptops were unaffected. The city website is hosted on a cloud-based platform. In a city press release, officials said residents could continue using online bill pay and other website services.
The FBI is assisting local authorities with a forensic review of the October 10 breach, including determining whether sensitive data was exposed or compromised, according to Heber Valley Radio. Franco said she was pleased the city maintained operations and made progress on recovery.
Utah's Cybersecurity Reporting Duties
Utah Code Section 63A-19-405 is among the provisions addressing breach reporting by governmental entities. Separately, House Bill 44, enacted in May, requires the state Cybersecurity Commission to set minimum cybersecurity standards for local education agencies and expands the Utah Cyber Center's support for them, according to cybersecurity firm Harborcoat.
Reporting and response support
The Utah Cyber Center lists receiving reports of system-security breaches under Section 63A-19-405 among its duties. Its public description does not specify what information a local government must include in a report. The center says it can assist local governments with breach response at their request. The available information does not say whether Heber City requested that assistance.
A Fast-Growing City Catches Hackers' Attention
The breach lands on a city that has changed shape quickly in recent years. The Kem C. Gardner Policy Institute released estimates in May measuring population change from 2024 to 2025, according to the Kem C. Gardner Policy Institute. Procurement records from late 2021 show Heber City maintained just one full-time IT manager.
Part of a Wider Regional Pattern
Heber City is not the only Wasatch Back community rethinking its digital defenses. Neighboring Midway City's council passed an ordinance in June barring municipal employees from using unapproved artificial intelligence platforms like ChatGPT, specifically to prevent cybersecurity vulnerabilities and protect confidential public data, the Park Record reported separately.
The pattern extends beyond Wasatch County. Eagle Mountain internet outages stretched into a third day last month after a multi-day cyberattack targeted the city's local internet provider, knocking out phone and internet service repeatedly.
For now, the exact vector of this month's intrusion, and whether the FBI's forensic review turns up any sign of data exfiltration or a ransomware demand, remains unresolved. City officials have said software for most systems is safe and that no public information is at risk, but the broader investigation into what the attackers accessed, if anything, is still underway.
