Questions continue to surround the cyberattack that disrupted Pennington County computer systems last month, and cybersecurity experts say a foreign adversary may be responsible.
County officials first reported a cybersecurity incident on July 5 that affected portions of the county’s network and temporarily disrupted some public services. While critical operations such as 911 dispatch, the sheriff’s office, courts, and the jail remained operational, other services including communications, internet access, and public records functions were impacted.
Pennington County officials have released few details as an investigation continues, but cybersecurity experts interviewed by South Dakota News Watch say the attack bears signs of activity often associated with foreign governments rather than criminal ransomware groups.
Experts point to countries such as Iran, Russia, and China as potential sources of sophisticated cyberattacks targeting government systems and critical infrastructure. Federal agencies have also recently warned that state and local governments face growing threats from foreign cyber actors.
Officials stress that no determination has been made regarding who carried out the attack, and the investigation remains ongoing. County leaders say anyone whose personal information may have been compromised will be notified as required by state law.
Cybersecurity experts say the incident highlights the increasing challenges local governments face as cyberattacks become more frequent and more complex nationwide.
