Georgia's Coffee County recently experienced a cyberattack that prompted officials to disconnect the county from the state's voter registration system as a precautionary measure. Sources familiar with the incident revealed that investigators suspect it was a ransomware attack, a tactic commonly used by cybercriminals to lock computer systems and demand ransom.
The federal Cybersecurity and Infrastructure Security Agency (CISA) notified Coffee County of the attack on April 15. Both federal and county authorities are currently working to identify the perpetrators behind the hack. A spokesperson from the office of Georgia's secretary of state confirmed the cyberattack and the county's response.
The voter registration system in question, known as GARViS, is a new technology aimed at ensuring accurate voter registration for millions of Georgian voters. Fortunately, there is no evidence to suggest that the hackers breached GARViS. As a precaution, Coffee County disconnected its network from GARViS and has since reconnected using backup laptops and isolated cellular networks.
Coffee County, with a population of approximately 43,000 residents in southeastern Georgia, has been in the spotlight due to efforts by supporters of former President Donald Trump to challenge the 2020 election results. In January 2021, pro-Trump operatives breached the county's election office in an attempt to find data to support baseless claims of election fraud.
Ransomware attacks have become a growing concern for state and local governments across the United States, with Georgia being no exception. Earlier this year, Fulton County, which includes Atlanta, fell victim to a ransomware attack that disrupted county operations for weeks. While the attack did not impact the county's election process, federal officials remain vigilant about the potential for ransomware incidents to disrupt voting.
US Cyber Command, the military's hacking unit, has previously taken action against ransomware criminals to safeguard election infrastructure. The incident in Coffee County serves as a reminder of the ongoing threats posed by cyberattacks and the importance of robust cybersecurity measures to protect critical systems.
