City of Middletown, Ohio hit by cyberattack paralyzing city operations for weeks
Learn More
The City of Middletown, Ohio, is reporting a major cybersecurity incident that occurred around August 17, 2025, which has crippled municipal computer systems for over three weeks and potentially exposed personal information of city employees.
The suspected ransomware attack has forced the closure of most city services, leaving approximately 50,000 residents unable to access critical municipal functions including utility billing, police records, health department services, and income tax operations.
The cybersecurity incident was detected around August 17, and city staff said they are working "around the clock" along with third-party specialists to restore network systems.
The city has not officially confirmed the nature of the attack. Richard Harknett, director of UC's Center for Cyber Strategy and Policy and co-director of the Ohio Cyber Range Institute, said it was likely a ransomware attack. "From the reporting that I have seen, it seems like a classic... ransomware, encryption type attack," Harknett said.
The nature of the exposed data and number of affected individuals is not disclosed. Middletown has approximately 50,000 residents who rely on various city services, and the potential exposure could affect anyone who has interacted with city departments including those who pay utilities, have received traffic tickets, or have used health department services.
Email, phone and website services remain unavailable to the city. Essential services have been maintained through emergency measures. The 911 services are available, and for non-emergency calls, residents should call 513-425-7701. Citizens can still pay utility bills online through InvoiceCloud with credit card fees, and no utilities will be shut off due to non-payment during this closure period.
The City of Middletown has been providing updates primarily through its Facebook page and through local media, as their official website remains inaccessible due to the cyberattack.
