Cyber Incident Disrupts Milford, New Hampshire, Municipal Services
Summary
Milford, New Hampshire, reported unauthorized activity affecting municipal systems, disrupting phone and internet service and some town services. Officials are investigating with forensic specialists; the extent and connection to a previously reported storage-system. .
Key points
- Phone and internet outages began July 15, 2026, affecting municipal buildings.
- The water utilities billing office closed and online payments were unavailable; the town clerk lost access to New Hampshire state systems.
- Milford said unauthorized activity affected municipal computer systems and that third-party forensic specialists were investigating.
- Officials had not identified the attack type or disclosed whether ransomware, malware, encryption, data theft, or a ransom demand was involved.
- The town said it was restoring systems and using backup procedures; vehicle registrations and vital-record requests remained available, though they could take longer.
- A resident warned the town in May that a file-sharing link appeared to expose a Synology storage system to the internet, but the report says its connection to the incident has not been established.
- As of the article’s latest update, Milford had not provided a restoration timeline, confirmed whether personal data was accessed, or identified all affected departments.
Article Details
- Victim Organization
- Town of Milford, New Hampshire
- Incident Type
- Cybersecurity incident involving unauthorized activity affecting municipal computer systems; attack type not determined.
- Incident Date
- 2026-07-15
- Disclosure Date
- 2026-07-16
- Operational Impact
- Phone and internet outages affected municipal buildings. The water utilities billing office closed and online payments were unavailable; the town clerk lost access to state systems. Vehicle registrations and vital-record requests remained available but could take longer, and remote participation in public meetings through Zoom was unavailable. The town said it was restoring systems and had implemented backup procedures.
- Ransom Or Extortion
- The town did not disclose a ransom demand or threat actor. Ransomware, malware, encryption, and data theft were not confirmed; officials had not determined the extent of the unauthorized activity.
- Claim Status
- confirmed
People
Eric “Fisch” FischerMilford resident and cybersecurity professional who warned town officials in a May 18 email that a file-sharing link appeared to expose a town Synology network-attached storage system directly to the internet. The article says the connection, if any, between that system and the investigated incident has not been independently determined.Joseph ToppingFounder and editor of DysruptionHub and author of the report.Lori RadkeMilford Town Administrator who received Fischer’s May 18 warning email.
Products
Synologysaid a file-sharing link provided in response to a right-to-know request appeared to expose a town Synology network-attached storage system directly to the internet.ZoomPublic meetings were to be recorded for later broadcast, but remote participation through Zoom was unavailable. The town directed residents to continue calling 911 for emergencies but did not specifically say whether