Particle.news
Download on the App Store

Colorado Agencies Drop CodeRED After Cyberattack as Vendor Confirms User Data Posted Online

Investigators are probing a targeted breach that forced a switch to temporary alert systems.

Overview

  • Crisis24 said data tied to the legacy OnSolve CodeRED platform was published online after a targeted attack that damaged the environment, and the company has decommissioned that platform.
  • Douglas County terminated its CodeRED contract, citing a lack of notification about the outage, and will rely on door-to-door and social media alerts until a new provider is in place within weeks.
  • Park County moved off OnSolve’s system to CodeRED by Crisis24 with basic alerting only, noting e911, customer contact groups, and enrollment data are expected to be restored before Nov. 28, while IPAWS and automated weather alerts remain unavailable.
  • Other Colorado agencies are reassessing their ties to CodeRED, with Arapahoe County shifting to RAVE, Thornton reviewing its contract, and Aurora reporting ongoing issues and limited communication from the vendor.
  • Officials continue to stress that 911 services are unaffected and urge users to change any reused passwords and monitor accounts, as the breach may include names, addresses, emails, phone numbers, and passwords.