Circleville Restores Municipal Systems After Ransomware Activity
Summary
Circleville says it restored municipal systems after ransomware activity, did not pay a ransom, and found no evidence of sensitive-data exfiltration. The incident’s start date and impact on public services remain unclear.
Key points
- The city and its technology provider isolated systems, examined potentially affected devices, and restored systems from clean environments or established recovery procedures.
- Mayor Michelle Blanton said the city did not pay a ransom; investigation and post-incident security review remain ongoing.
- The city has not disclosed when the activity began or which public services were affected.
- A community group’s account that the incident affected the Police Department and was reported to county officials was not independently corroborated; no interruption to public-safety operations was established.
- Blanton said the city was not aware of evidence that sensitive information had been exfiltrated. As of Aug. 27, no ransomware or extortion group had publicly claimed responsibility.
- The article describes a separate 2023 attack on Circleville Municipal Court; LockBit claimed it stole 500 GB of court data, but the court did not confirm the claim.
Article Details
- Victim Organization
- City of Circleville
- Incident Type
- Ransomware activity
- Disclosure Date
- 2026-08-26
- Operational Impact
- Affected municipal systems were isolated, rebuilt from clean environments or recovered through established procedures, reviewed, and restored. Which services were affected and whether police or public-safety operations were interrupted were not established.
- Ransom Or Extortion
- The city said it did not pay a ransom. As of August 27, no public responsibility claim from a ransomware or extortion group had been found.
- Claim Status
- confirmed
People
Michelle BlantonCircleville mayor; said the city did not pay a ransom and was not aware of evidence that sensitive information had been exfiltrated.Tiffany NashPickaway County Emergency Management Agency director. A community group attributed to her an account that state officials alerted her to a potential incident; the article says this account was not independently corroborated.