INCIDENT REPORT · CP-2025-014

Nevada statewide ransomware attack

L3 · ELEVATEDCONFIRMED

A ransomware attack identified on 24 August 2025 disrupted Nevada state government networks, closing state offices and taking websites and phone lines offline.

Incident ID: CP-2025-014
Disclosure date: 24 AUG 2025
Detection date: 24 AUG 2025
Affected countries: United States
Plotted location: Carson City, Nevada, United States (Affected state government seat)
Threat classification: Level 3 — ELEVATED
Classification rationale: Statewide disruption of government services for weeks.
Attack type: Ransomware
Nature: Malicious activity
Attack vector: State employee downloaded malware from a spoofed website; attacker had access from as early as May 2025
Sectors: Government
Critical infrastructure: Yes
Organizations affected: State of Nevada (about 60 state agencies)
Operational consequences: State offices closed for two days and DMV offices for over a week; about 60 agencies were disrupted and recovery took about 28 days. The state refused to pay a ransom and reported response costs of about $1.5 million.
Estimated financial impact: $1.5M — Nevada Governor's Technology Office after-action report (Nov 2025): at least ~$1.5 million in recovery costs, including ~$1.3 million for external vendors.
Attribution (as stated): No official attribution recorded

SOURCE REFERENCES

RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.

Nevada statewide ransomware attack

L3 · ELEVATEDCONFIRMED

A ransomware attack identified on 24 August 2025 disrupted Nevada state government networks, closing state offices and taking websites and phone lines offline.

Incident ID

CP-2025-014

Disclosure date

24 AUG 2025

Detection date

24 AUG 2025

Affected countries

United States

Plotted location

Carson City, Nevada, United States (Affected state government seat)

Threat classification

Level 3 — ELEVATED

Classification rationale

Statewide disruption of government services for weeks.

Attack type

Ransomware

Nature

Malicious activity

Attack vector

State employee downloaded malware from a spoofed website; attacker had access from as early as May 2025

Sectors

Government

Critical infrastructure

Yes

Organizations affected

State of Nevada (about 60 state agencies)

Operational consequences

State offices closed for two days and DMV offices for over a week; about 60 agencies were disrupted and recovery took about 28 days. The state refused to pay a ransom and reported response costs of about $1.5 million.

Estimated financial impact

$1.5M — Nevada Governor's Technology Office after-action report (Nov 2025): at least ~$1.5 million in recovery costs, including ~$1.3 million for external vendors.

Attribution (as stated)

No official attribution recorded