{"id":72572,"date":"2025-08-28T14:30:41","date_gmt":"2025-08-28T18:30:41","guid":{"rendered":"https:\/\/statescoop.com\/?p=72572"},"modified":"2025-08-28T14:30:46","modified_gmt":"2025-08-28T18:30:46","slug":"nevada-ransomware-attack-2025","status":"publish","type":"post","link":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","title":{"rendered":"Nevada officials confirm data stolen in ransomware attack"},"content":{"rendered":"\n

Nevada state officials confirmed Wednesday night that the “security incident<\/a>” that was detected on Sunday was a ransomware attack, and that while the investigation is still ongoing, it appears the perpetrators stole state data.<\/p>\n\n\n\n

During a press conference<\/a> Wednesday evening, Nevada Chief Information Officer Timothy Galluzi shared more details about the cyberattack. While the forensic investigation is still ongoing, Galluzi shared that it has revealed evidence that some state data has been exfiltrated from the state’s system without authorization. He said it is unclear what type of data was stolen.<\/p>\n\n\n\n

“I need to be very clear on the next point. At this stage of our intensive investigation, we cannot yet identify or classify the specific nature of this data. The process of analyzing the information to determine exactly what was taken is complex, methodical and time consuming,” he said. “Speculation on the data that was affected before we have any definitive proof would be irresponsible.”<\/p>\n\n\n\n

Galluzi said the state’s data center operations team first detected anomalous activity on its server on Sunday morning, and the state immediately activated its cybersecurity incident response plan. This included, he said, isolating certain systems and taking them offline to prevent further intrusion on the state’s systems. This containment process, Galluzi said, caused several of the state’s web assets to go dark \u2014 including the state\u2019s main website,\u00a0NV.gov<\/a>, along with many agency sites and online services \u2014\u00a0which he acknowledged has caused ample problems across the state’s operations.<\/p>\n\n\n\n

“Our goal is to restore full functionality as soon as possible, but we have a duty to do so safely and securely,” he said, adding that while several of the assets are still offline, the state must ensure the threat is “eradicated” before bringing them back online.<\/p>\n\n\n\n

Galluzi said the state was receiving support from federal cyber partners, and the Cybersecurity and Infrastructure Security Agency confirmed<\/a> as much, sharing Wednesday it was assisting the state in restoring networks for lifesaving and critical services and helping to rebuild its systems. <\/p>\n\n\n\n

As of Thursday, no cyber threat actor had claimed responsibility for the ransomware attack. <\/p>\n\n\n\n

\u201cShould we determine that any sensitive personal information of our citizens was compromised, we are prepared to follow the appropriate steps,\u201d Galluzi continued.<\/p>\n","protected":false},"excerpt":{"rendered":"

Nevada officials said they still don’t know what data was compromised, but that at least some data has been exfiltrated.<\/p>\n","protected":false},"author":133,"featured_media":20792,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"disable_grayscale_images":true,"grayscale_contrast":0,"sponsored_content":false,"display_author_bio":true,"story_type":"","footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[20646],"tags":[19,213,16537,23566,24702],"people":[],"special-report":[],"authors":[23807],"class_list":["post-72572","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ransomware","tag-nevada","tag-cyberattack","tag-timothy-galluzi","tag-ransomware-attack","author-kquinlan"],"yoast_head":"\nNevada officials confirm data stolen in ransomware attack | StateScoop<\/title>\n<meta name=\"description\" content=\"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nevada officials confirm data stolen in ransomware attack | StateScoop\" \/>\n<meta property=\"og:description\" content=\"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/\" \/>\n<meta property=\"og:site_name\" content=\"StateScoop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/StateScoop\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-28T18:30:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-28T18:30:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2120\" \/>\n\t<meta property=\"og:image:height\" content=\"1414\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Keely Quinlan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@State_Scoop\" \/>\n<meta name=\"twitter:site\" content=\"@State_Scoop\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/\",\"url\":\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/\",\"name\":\"Nevada officials confirm data stolen in ransomware attack | StateScoop\",\"isPartOf\":{\"@id\":\"https:\/\/statescoop.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg\",\"datePublished\":\"2025-08-28T18:30:41+00:00\",\"dateModified\":\"2025-08-28T18:30:46+00:00\",\"description\":\"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage\",\"url\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg\",\"contentUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg\",\"width\":2120,\"height\":1414,\"caption\":\"(Getty Images)\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/statescoop.com\/#website\",\"url\":\"https:\/\/statescoop.com\/\",\"name\":\"StateScoop\",\"description\":\"Latest news and events in state and local government technology\",\"publisher\":{\"@id\":\"https:\/\/statescoop.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/statescoop.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/statescoop.com\/#organization\",\"name\":\"StateScoop\",\"url\":\"https:\/\/statescoop.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/statescoop.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png\",\"contentUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png\",\"width\":1470,\"height\":186,\"caption\":\"StateScoop\"},\"image\":{\"@id\":\"https:\/\/statescoop.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/StateScoop\/\",\"https:\/\/x.com\/State_Scoop\",\"https:\/\/www.linkedin.com\/company\/statescoop\/\",\"https:\/\/www.youtube.com\/@StateScoop\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Nevada officials confirm data stolen in ransomware attack | StateScoop","description":"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","og_locale":"en_US","og_type":"article","og_title":"Nevada officials confirm data stolen in ransomware attack | StateScoop","og_description":"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.","og_url":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","og_site_name":"StateScoop","article_publisher":"https:\/\/www.facebook.com\/StateScoop\/","article_published_time":"2025-08-28T18:30:41+00:00","article_modified_time":"2025-08-28T18:30:46+00:00","og_image":[{"width":2120,"height":1414,"url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg","type":"image\/jpeg"}],"author":"Keely Quinlan","twitter_card":"summary_large_image","twitter_creator":"@State_Scoop","twitter_site":"@State_Scoop","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","url":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","name":"Nevada officials confirm data stolen in ransomware attack | StateScoop","isPartOf":{"@id":"https:\/\/statescoop.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage"},"image":{"@id":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage"},"thumbnailUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg","datePublished":"2025-08-28T18:30:41+00:00","dateModified":"2025-08-28T18:30:46+00:00","description":"Nevada officials said they still don't know what data was compromised, but that at least some data has been exfiltrated.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/#primaryimage","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg","contentUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg","width":2120,"height":1414,"caption":"(Getty Images)"},{"@type":"WebSite","@id":"https:\/\/statescoop.com\/#website","url":"https:\/\/statescoop.com\/","name":"StateScoop","description":"Latest news and events in state and local government technology","publisher":{"@id":"https:\/\/statescoop.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/statescoop.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/statescoop.com\/#organization","name":"StateScoop","url":"https:\/\/statescoop.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/statescoop.com\/#\/schema\/logo\/image\/","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png","contentUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png","width":1470,"height":186,"caption":"StateScoop"},"image":{"@id":"https:\/\/statescoop.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/StateScoop\/","https:\/\/x.com\/State_Scoop","https:\/\/www.linkedin.com\/company\/statescoop\/","https:\/\/www.youtube.com\/@StateScoop"]}]}},"parsely":{"version":"1.1.0","canonical_url":"https:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","smart_links":{"inbound":0,"outbound":0},"traffic_boost_suggestions_count":0,"meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"Nevada officials confirm data stolen in ransomware attack","url":"http:\/\/statescoop.com\/nevada-ransomware-attack-2025\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/statescoop.com\/nevada-ransomware-attack-2025\/"},"thumbnailUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg?w=150&h=150&crop=1","image":{"@type":"ImageObject","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg"},"articleSection":"Cybersecurity","author":[{"@type":"Person","name":"Keely Quinlan","url":"https:\/\/statescoop.com\/author\/kquinlan\/"}],"creator":["Keely Quinlan"],"publisher":{"@type":"Organization","name":"StateScoop","logo":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png"},"keywords":["cyberattack","nevada","ransomware","ransomware attack","timothy galluzi"],"dateCreated":"2025-08-28T18:30:41Z","datePublished":"2025-08-28T18:30:41Z","dateModified":"2025-08-28T18:30:46Z"},"rendered":"<script type=\"application\/ld+json\" class=\"wp-parsely-metadata\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"Nevada officials confirm data stolen in ransomware attack\",\"url\":\"http:\\\/\\\/statescoop.com\\\/nevada-ransomware-attack-2025\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/statescoop.com\\\/nevada-ransomware-attack-2025\\\/\"},\"thumbnailUrl\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2018\\\/10\\\/ransomware-ascii-getty.jpg?w=150&h=150&crop=1\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2018\\\/10\\\/ransomware-ascii-getty.jpg\"},\"articleSection\":\"Cybersecurity\",\"author\":[{\"@type\":\"Person\",\"name\":\"Keely Quinlan\",\"url\":\"https:\\\/\\\/statescoop.com\\\/author\\\/kquinlan\\\/\"}],\"creator\":[\"Keely Quinlan\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"StateScoop\",\"logo\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2023\\\/01\\\/cropped-ss_favicon.png\"},\"keywords\":[\"cyberattack\",\"nevada\",\"ransomware\",\"ransomware attack\",\"timothy galluzi\"],\"dateCreated\":\"2025-08-28T18:30:41Z\",\"datePublished\":\"2025-08-28T18:30:41Z\",\"dateModified\":\"2025-08-28T18:30:46Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/statescoop.com\/p.js"},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2018\/10\/ransomware-ascii-getty.jpg","distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"StateScoop","distributor_original_site_url":"https:\/\/statescoop.com","push-errors":false,"_links":{"self":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/72572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/users\/133"}],"replies":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/comments?post=72572"}],"version-history":[{"count":2,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/72572\/revisions"}],"predecessor-version":[{"id":72575,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/72572\/revisions\/72575"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/media\/20792"}],"wp:attachment":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/media?parent=72572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/categories?post=72572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/tags?post=72572"},{"taxonomy":"people","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/people?post=72572"},{"taxonomy":"special-report","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/special-report?post=72572"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/authors?post=72572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}