Detroit-area government services impacted by cyberattack

Avatar

Wayne County, Michigan is dealing with a cyberattack that has shut down all government websites and limited the operations of several offices. 

Home to Detroit, the county is the largest in the state with more than 1.75 million residents. 

County spokesperson Doda Lulgjuraj told Recorded Future News that the investigation into the cyber incident is ongoing. 

“Impacted services have been transitioned to backup processes to maintain operations. Barring any unforeseen issues, we expect the county website to be fully operational by the start of business on Friday,” he said. “This will restore access to online property tax payments and property records.”

Lulgjuraj also sent a brief statement to local affiliates from ABC, FOX and CBS on Wednesday, confirming that a cyberattack targeted “some internal systems,” Lulgjuraj said. 

“We are currently investigating the scope of the incident with our cybersecurity partners which include the FBI and Michigan State Police,” he told the outlets yesterday. 

A spokesperson for Detroit mayor Mike Duggan said city systems have not been affected by the attack. 

Sources told ABC that the county is dealing with a ransomware attack that began on Wednesday. 

Corrections officers within the Wayne County Sheriff’s Office have struggled to process inmates, the Wayne County Treasurer’s Office has had issues collecting taxes online and the Wayne County Register of Deeds Office closed early on Wednesday, limiting the ability of real estate leaders to conduct work, ABC reported. 

Wayne County Probate Court told Recorded Future News that its systems were still functioning as of Thursday afternoon. 

State officials did not respond to requests for comment. Government bodies in Michigan have been battered throughout 2024, with the municipalities of Flint and Traverse City both dealing with ransomware incidents. 

Two of the country’s biggest hospital systems with several arms in Michigan — Ascension and McLaren — were also forced to limit operations due to ransomware attacks. 

CybercrimeGovernmentNewsNews Briefs
Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Jonathan Greig

is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic.

 

Total
0
Shares
Previous Post

DOJ, Microsoft seize dozens of domains ‘used by Russian intelligence agents’

Next Post

North Korea ‘Shrouded Sleep’ malware campaign targeting Cambodia, other Southeast Asian nations

Related Posts

PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms

Russian organizations have become the target of a phishing campaign that distributes malware called PureRAT, according to new findings from Kaspersky. "The campaign aimed at Russian business began back in March 2023, but in the first third of 2025 the number of attacks quadrupled compared to the same period in 2024," the cybersecurity vendor said. The attack chains, which have not been
Avatar
Read More

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier CVE-2025-54309, the vulnerability carries a CVSS score of 9.0. "CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS," according to
Avatar
Read More

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

Microsoft on Monday announced that it has moved the Microsoft Account (MSA) signing service to Azure confidential virtual machines (VMs) and that it's also in the process of migrating the Entra ID signing service as well. The disclosure comes about seven months after the tech giant said it completed updates to Microsoft Entra ID and MS for both public and United States government clouds to
Avatar
Read More