Phishing Incident Disrupts Nacogdoches County Employees’ Online Pay-Stub Access
Summary
Nacogdoches County officials said a May phishing incident affected limited systems and former sheriff’s office employees, leaving online pay-stub access unavailable. The incident was contained; data access remains unknown and emergency services continued.
Key points
- County Judge Chris Bentley said the May 28 incident was caused by phishing; the county said it identified and responded to the incident in late May.
- The county reported that a limited number of systems and former sheriff’s office employees were affected, including some people now employed by the county.
- Online pay-stub access was unavailable, so employees received paper pay stubs; Bentley said pay itself was not affected.
- The county said the incident was contained and remediated, and emergency services were not interrupted.
- The county did not say whether data was accessed or taken, or whether the attack directly affected payroll, website, or sheriff’s office systems; its investigation was ongoing.
- No hacking group had publicly claimed responsibility in ransomware leak-site postings reviewed by the publisher, and the county had not reported a ransom demand.
Article Details
- Victim Organization
- Nacogdoches County
- Victim Domain
- nacogdochesco.gov
- Incident Type
- Phishing attack affecting a limited number of county systems and disrupting online pay-stub access.
- Incident Date
- 2026-05-28
- Affected Records
- Exact number not disclosed; the affected group was limited to former sheriff’s office employees, including some current county employees who previously worked there.
- Operational Impact
- Online pay-stub access was unavailable, and employees received paper pay stubs. County officials said sheriff’s office operations, county finances, county services, and emergency services were not affected. The incident was contained and remediated. Whether data was accessed or taken was not disclosed.
- Ransom Or Extortion
- The county has not reported a ransom demand. DysruptionHub reported that no hacking group had publicly claimed responsibility in the ransomware leak-site postings it reviewed.
- Claim Status
- confirmed
MITRE ATT&CK
People
Chris BentleyNacogdoches County judge who described the incident as phishing and explained its operational impact.Mark HarknessCounty commissioner and judge pro tem who responded to a request for incident clarification, saying the county could provide no additional information beyond its press release.