United States
USA
Ransomware on OnSolve CodeRED disrupts emergency alerts; legacy platform decommissioned
A ransomware attack on OnSolve’s CodeRED emergency alert platform caused significant disruptions to local emergency notifications across the U.S. Multiple jurisdictions reported losing access beginning Nov. 10, 2025, and at least one county said the vendor permanently decommissioned the legacy CodeRED system. Agencies reported service outages and workarounds, evidencing downstream service unavailability.
75
Estimated severity
75 / 100
91
Source reliability
91 / 100
Approximate Date
2025-11-10
Targeted Company
ONSOLVE
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
BELTRAMI COUNTY (Downstream customer)BUNCOMBE COUNTY (Downstream customer)CITY OF MELISSA (Downstream customer)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionOperational disruptionService unavailability
Affected sectors
Government & Public AdministrationTechnology & IT Services
Affected departments
No information
Attack Profile
Attack types
Ransomware
Attributed threat actors
INC RANSOM
Sources
Incident Sources
securityweek.comhttps://www.securityweek.com/ransomware-attack-disrupts-local-emergency-alert-system-across-usco.beltrami.mn.ushttps://www.co.beltrami.mn.us/news/posts/press-release-codered-decommissionedmalwarebytes.comhttps://www.malwarebytes.com/blog/news/2025/11/millions-at-risk-after-nationwide-codered-alert-system-outage-and-data-breachbuncombenc.govhttps://www.buncombenc.gov/m/newsflash/Home/Detail/694cityofmelissa.comhttps://www.cityofmelissa.com/CivicAlerts.aspx?AID=167