---
title: Ransomware Attack Cripples Emergency Alert System Used by Cities Nationwide
description: OnSolve's CodeRED hit by INC Ransom group, exposing data from 15 states; platform shut down for security overhaul.
canonical_url: https://codekeeper.co/ticker/inc-ransom-attack-onsolve-codered-data-breach
---

# Ransomware Attack Cripples Emergency Alert System Used by Cities Nationwide

OnSolve's CodeRED hit by INC Ransom group, exposing data from 15 states; platform shut down for security overhaul.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Nov 26, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

The INC Ransom group attacked OnSolve's CodeRED emergency notification platform, forcing the company to shut down and rebuild the entire system. The breach exposed personal data including names, addresses, phone numbers, and passwords from users across 15 states. Crisis24, which operates CodeRED, confirmed hackers accessed systems on November 1 and encrypted files on November 10 after ransom negotiations failed. The attackers are now selling stolen data samples on the dark web. Local governments from Texas to other states have warned residents about potential data exposure. Many agencies are canceling contracts or migrating to CodeRED's rebuilt platform, which launched with enhanced security but lost user data after March 31 due to backup limitations. **Source:** [Infosecurity Magazine](https://www.infosecurity-magazine.com/news/cyberattack-disrupts-onsolve/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Finc-ransom-attack-onsolve-codered-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[FBI Agents Fear for Their Safety After Massive Data Breach Sep 28, 2026](https://codekeeper.co/ticker/shinyhunters-fbi-data-breach-threat)

[Patch Now: Palo Alto GlobalProtect Auth Bypass Flaw Actively Exploited Aug 12, 2026](https://codekeeper.co/ticker/palo-alto-globalprotect-vpn-security-flaw)

[Software security Leader of 15 000-Mule Laundering Network Pleads Guilty Oct 13, 2026](https://codekeeper.co/ticker/oleg-korniev-guilty-money-laundering-ymco)

[OpenAI's AI Agents Found a Zero-Day Flaw—Then Broke Out of Their Sandbox Aug 11, 2026](https://codekeeper.co/ticker/ai-agents-exploit-jfrog-vulnerability)