Colorado State Public Defender network shuts down after cyberattack

A cyberattack the operations of the Office of Colorado State Public Defender, leading to a shutdown of its computer network and rendering public defenders across Colorado unable to access essential work-related systems.

The cybersecurity incident was first acknowledged around 11 a.m. on Friday, 9th of February. The breach has severely impacted their ability to review court dockets, file court documents, and perform critical legal work for their clients. The attack involved malware encryption of data within their system. While the exact duration of the shutdown remains uncertain, internal communications suggest that the office might be "non-operational" for up to a week.

The Colorado Judicial Department confirmed that the wider court system remains operational and unaffected by the breach, with continuous monitoring for any suspicious network activity.

Update - The Office of the Colorado State Public Defender on Friday, 15th of March 2024 reported that some personal client was exposed during the ransomware attack. Officials are uncertain about the extent of the personal information breach and advise clients to monitor their financial accounts and identities for fraudulent activities.

As of 21st of March 2024, the Colorado State Public Defender's Office  confirmed that personal information could have been compromised in the ransomware attack. The agency has not disclosed any details of the ongoing restoration efforts following the breach. During the cyberattack, unauthorized copies of files were made. These files potentially contained sensitive information, including

• names,
• Social Security numbers,
• driver's license details,
• medical records,
• health insurance data.