CodeRed Security Breach

Posted

Dear West Concord Residents,

The City of West Concord is writing to inform you of a security incident involving our emergency notification system, OnSolve CodeRED.

On November 21, 2025, the City was notified of a potential security breach affecting the CodeRED platform. At that time, our vendor was unable to confirm what data, if any, had been accessed. On November 26, 2025, their forensic investigators provided additional findings, which we want to share with you directly.

What We Have Learned

• An organized cybercriminal group has claimed responsibility for this incident, which affected the CodeRED platform and its customers. Law enforcement has been notified and is actively investigating.

• Investigators believe that data associated with the OnSolve CodeRED platform may have been removed from the system. The CodeRED platform is generally used only for mass-notification emergency alerts and typically maintains basic subscriber information. Although some data has appeared online, investigators have not yet confirmed whether it originated from CodeRED or determined the exact scope of the data involved.

• To ensure safety and prevent further risk, the City has fully decommissioned the OnSolve CodeRED platform. It will not be restored.

• The incident has been confirmed as contained to the CodeRED environment, with no evidence of impact to other City systems.

What This Means for You

Based on the information currently available, it appears the impacted dataset may include certain contact information provided by CodeRED users, such as:

• Name

• Address

• Email address

• Phone numbers

• Passwords associated with CodeRED user profiles

If you used the same password for CodeRED and any other accounts (personal or business), we strongly urge you to change those passwords immediately. Using unique passwords for each account is one of the most effective ways to protect your information.

Our Response

The compromised system has been disabled, and the City is actively working to implement a new emergency notification platform with enhanced security protections. The City of West Concord is committed to safeguarding your personal information, and we will continue to provide updates as more information becomes available.

If you have questions or need assistance, please contact: Paula Even Trenda, City Administrator: 507-527-2668 x.5 or administrator@westconcordmn.com

We sincerely regret any concern or inconvenience this incident may cause and appreciate your understanding as we work to improve and protect our emergency communication systems.

Sincerely,

City of West Concord