United States
USA
Ransomware forces shutdown of OnSolve CodeRED; Crisis24 decommissions legacy platform
Crisis24 confirmed a ransomware attack damaged the OnSolve CodeRED emergency notification environment, prompting permanent decommissioning of the legacy platform. The outage disrupted emergency alerting for agencies across the U.S., with municipalities reporting the system was taken offline in mid-November and advising residents of the service interruption while the vendor worked on a replacement platform.
75
Estimated severity
75 / 100
83
Source reliability
83 / 100
Approximate Date
10/11/2025
Targeted Company
CRISIS24
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
North America · United States
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruptionDownstream customer disruption
Affected sectors
Technology & IT ServicesGovernment & Public Administration
Affected departments
No information
Attack Profile
Attack types
Ransomware
Attributed threat actors
INC RANSOM
Sources
Incident Sources
cyberscoop.comhttps://cyberscoop.com/crisis24-onsolve-codered-emergency-system-ransomwareketteringoh.orghttps://www.ketteringoh.org/codered-security-breachsecurityweek.comhttps://www.securityweek.com/ransomware-attack-disrupts-local-emergency-alert-system-across-usdarkreading.comhttps://www.darkreading.com/cyberattacks-data-breaches/codered-emergency-alert-platform-shut-down-cyberattack