INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Baltimore suburb confirms August data breach after ransomware claims reported

| 2026-10-16 13:05 CRITICAL HIGH RANSOMWARE & EXTORTION DATA BREACH
JSON
Executive Summary
AI-generated
A series of calculated cybercrimes targeting state and local governments in the United States has been reported, with cities and counties in New Mexico, Utah, Texas, Nebraska, Missouri, and Arizona experiencing service outages due to cyberattacks over the last two weeks. The attacks are believed to be part of a surge in such incidents, specifically targeting government systems. In August, hackers stole files from Anne Arundel County's government systems, with officials confirming that an unauthorized actor gained access to limited systems and copied certain files. The Rhysida ransomware gang claimed responsibility for the attack, threatening to leak 2.6 terabytes of documents if a $2 million ransom was not paid.
Technical Mitigations AI-generated
• Block or hunt for the Rhysida ransomware gang, which has targeted governments across the globe. • Patch systems against known vulnerabilities exploited by the Rhysida ransomware gang. • Implement a robust incident response plan to quickly detect and respond to future cyberattacks.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
MX KW
governmentgovernment
Incident Timeline
‎2025/10/16
Anne Arundel County confirmed a previously undisclosed August data breach involving ransomware, which was distinct from the 2024 incident that forced system shutdowns.
tactic Ransomware
Anne Arundel County dealt with a ransomware attack by a different group last year that forced the government to shut off multiple systems.
‎August 28
Threat actors used ransomware to target a limited subset of systems within the county computer network, prompting an investigation on August 28.
organisation Recorded Future News
A county spokesperson told Recorded Future News that they discovered “irregular activity” on August 28 and began an investigation on a “limited subset of systems within the county computer network.”
‎2026/10/16
The Anne Arundel County, Maryland, confirmed an August data breach after being targeted by the Rhysida ransomware gang.
organisation Kuwait’s Finance Ministry
Its victims include Kuwait’s Finance Ministry , the city of Seattle and the city of Columbus, Ohio and even the transportation department of Maryland .
organisation Seattle
Its victims include Kuwait’s Finance Ministry , the city of Seattle and the city of Columbus, Ohio and even the transportation department of Maryland .
organisation Ohio
Its victims include Kuwait’s Finance Ministry , the city of Seattle and the city of Columbus, Ohio and even the transportation department of Maryland .
organisation Missouri
The Anne Arundel County spokesperson added that recent reports “indicate that there has been a surge in these kinds of calculated cybercrimes specifically targeting state and local governments.”  Cities and counties in New Mexico , Utah , Texas , Nebraska , Missouri and Arizona have all dealt with service outages over the last two weeks due to cyberattacks.
organisation Arizona
The Anne Arundel County spokesperson added that recent reports “indicate that there has been a surge in these kinds of calculated cybercrimes specifically targeting state and local governments.”  Cities and counties in New Mexico , Utah , Texas , Nebraska , Missouri and Arizona have all dealt with service outages over the last two weeks due to cyberattacks.
data_breach 2.6 terabytes
The attack was claimed by the Rhysida ransomware gang, which threatened to leak 2.6 terabytes worth of documents stolen from the county if a $2 million ransom was not paid.
financial $2 ransom
The attack was claimed by the Rhysida ransomware gang, which threatened to leak 2.6 terabytes worth of documents stolen from the county if a $2 million ransom was not paid.
organisation Annapolis
The Baltimore suburb is home to more than 600,000 residents and the state’s capital of Annapolis.
organisation the Defense Department
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
organisation the Internal Revenue Service
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
organisation the Environmental Protection Agency
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
organisation the Social Security Administration
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
organisation the Department of Agriculture
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
organisation the U.S. Coast Guard
Dozens of federal agencies have offices or headquarters in the county, including the Defense Department, the Internal Revenue Service, the Environmental Protection Agency, the Social Security Administration, the Department of Agriculture, the U.S. Coast Guard and more.
‎October 19
The county's planned October 19 breach notification letters were inadvertently made public when they were released on Thursday evening.
Tactical Metrics
Metrics
data_breach
3
Terabytes
The attack was claimed by the Rhysida ransomware gang, which threatened to leak 2.6 terabytes worth of documents stolen from the county if a $2 million ransom was not paid.
Metrics
financial
2,000,000
Ransom
The attack was claimed by the Rhysida ransomware gang, which threatened to leak 2.6 terabytes worth of documents stolen from the county if a $2 million ransom was not paid.
Intelligence Sources
TheRecord 2026-10-16