Cybersecurity incident disrupts City of Ballwin municipal online payment services

On March 16, 2023, the City of Ballwin, Missouri, detected a network security incident affecting municipal information systems. Officials disconnected affected computers and servers while investigating unauthorized activity and restoring services. Several public-facing online payment portals became unavailable, preventing residents from using certain electronic payment functions. The municipality confirmed that emergency dispatch and police services remained operational and that cloud-based financial systems were not accessed. The Royal ransomware group subsequently claimed responsibility, but its attribution and any encryption activity were not independently established. The incident materially impaired municipal digital transaction and payment service delivery.