Story perspectives

Cyberattack on CodeRED Exposes Data of Thousands in Colorado

11/26/2025

Summary

Cybercriminals Compromise CodeRED

A cyberattack on the CodeRED emergency notification system compromised the personal data of thousands of Colorado residents, including names, addresses, and passwords.
The attack was attributed to an organized cybercriminal group.
Douglas County and Park County terminated their contracts with CodeRED.
The situation remains fluid as agencies seek more secure alternatives.

Summary

CodeRED Data Breach

A cyberattack on CodeRED compromised personal data of Northern California users, affecting agencies including Sutter, Nevada, Glenn counties, and the Truckee and Yuba County Offices of Emergency Services.
The breach exposed users' names, addresses, emails, phone numbers, and passwords.
CodeRED advised users to change passwords if they reuse them elsewhere.
Despite the outage, 9-1-1 services remain operational.
Wireless Emergency Alerts and local media continue to provide emergency notifications.

History

Historical Context

The 2021 SolarWinds cyberattack exposed significant vulnerabilities in U.S. cybersecurity, impacting over 18,000 organizations, including federal agencies. This incident followed a series of high-profile breaches, such as the Colonial Pipeline ransomware attack in May 2021, underscoring the persistent threat posed by organized cybercriminals and the urgent need for enhanced security measures to protect public safety and sensitive data.

1 of 3

Cybercriminals Compromise CodeRED

A cyberattack on the CodeRED emergency notification system compromised the personal data of thousands of Colorado residents, including names, addresses, and passwords.
The attack was attributed to an organized cybercriminal group.
Douglas County and Park County terminated their contracts with CodeRED.
The situation remains fluid as agencies seek more secure alternatives.

1 / 3