Peak Software Systems Cyberattack Disrupts Recreation Signups Across Cities

· Original article ↗

Summary

A cyberattack on Peak Software Systems disrupted its Sportsman recreation platform, affecting signups, rentals and some payments in several cities. A city notice said attackers encrypted company infrastructure; review of other customer data was ongoing.

Key points

  • A City of Clute notice said Peak reported detecting an attack on Feb. 26 that led to encryption of parts of its infrastructure, including backups and internal systems.
  • The notice said Peak engaged outside cybersecurity help, worked with federal law enforcement and began restoring systems on March 1 after obtaining decryption keys from the attackers.
  • Cities including Garden City, Brigham City, South Jordan and Monroe reported disrupted registrations or rentals; some services were unavailable online and in person.
  • Clute said Peak reported no exposure of customer credit card data because payments use separate PCI-compliant infrastructure; review of other customer data was ongoing.
  • Some city updates said registration services were back up, but Brigham City postponed swim-lesson registration to March 16.

Article Details

Victim Organization
Peak Software Systems
Incident Type
Cyberattack involving encryption of parts of the company’s infrastructure, including backups and internal systems.
Incident Date
2026-02-26
Affected Records
Unknown
Affected Data Size
Unknown
Operational Impact
The outage disrupted Sportsman registration and rental services used by U.S. cities. Some cities could not process online or in-person registrations or rentals; some facilities accepted cash only. Peak reportedly began restoration on March 1 after obtaining decryption keys. Review of customer data was ongoing.
Ransom Or Extortion
The vendor reportedly obtained decryption keys from the attackers. Whether a ransom was demanded or paid was not reported.
Claim Status
confirmed

MITRE ATT&CK

Vendors

Products

Countries

Industries