The city of Leavenworth, Kansas, continues to deal with the fallout from a network intrusion that began on November 19. Though the initial event was reported simply as a “network outage affecting city services,” external investigation confirmed by November 25 that the disruption “stemmed from a cyber-attack.” This incident targeted the internal network of the city government, leaving the broader internet and essential utility infrastructure untouched. The sustained difficulties necessitate ongoing manual processes as investigators work to resolve the system issues.
The cyberattack has created significant problems for several key back-office and public-facing functions within the municipality. Systems for processing vendor payments and invoices are experiencing workarounds, as are online platforms for permits and inspections. Furthermore, the hiring process has been complicated, with emailed employment applications currently facing disruption. City officials have advised that these manual workarounds may be necessary “for the near future” until the compromised systems are fully restored.
To mitigate the impact of the ongoing system disruption, the city has instructed residents and contractors on alternative methods for conducting business. Instead of using the affected online or electronic systems, individuals are being directed to utilize traditional mail services or to drop off materials in person. Specifically, permit requests and job applications must be submitted directly at City Hall until the digital platforms become fully functional and secure once again.
The initial impact of the network outage was immediate, resulting in limited access to essential communication tools such as phone and email systems. The city also experienced a temporary reduction in its capacity to issue necessary licenses and permits, adding to the immediate administrative burden. These immediate effects underscored the depth of the intrusion and the operational reliance of the city on its digital infrastructure.
Crucially, the city confirmed early on that its emergency services remained fully operational and unaffected by the cyberattack. Services vital to public safety, including 911 dispatch, police department operations, and fire services, were reported as “still fully functioning.” This separation of the emergency infrastructure from the compromised administrative network was a significant factor in maintaining essential community services throughout the duration of the disruption.
Reference:
