Sutton and Fort Smith hit by ransomware
Sutton and Fort Smith reported ransomware incidents tied to Global and Interlock. Both cities said the attacks were contained.
The Town of Sutton, Massachusetts, and the City of Fort Smith, Arkansas, were hit by ransomware incidents attributed to the Global and Interlock groups. Sutton confirmed an incident that affected part of its network and Sutton Public Schools, while Fort Smith said the attack was contained and that it had identified the initial access path and the scope of data accessed.
The Town of Sutton, Massachusetts, and the City of Fort Smith, Arkansas, were named in ransomware incidents attributed to the Global and Interlock groups. Sutton confirmed a cybersecurity incident that affected parts of its network and Sutton Public Schools, while Fort Smith said the attack was contained and that it had already identified how the actor got in and what information was accessed.
What happened in Sutton?
Sutton said it detected a cybersecurity incident affecting portions of its network environment and took immediate steps to secure its systems. The town also said it hired independent cybersecurity and forensics specialists, notified law enforcement, and kept services operating while the investigation continued.
The town added that the impact extended to municipal networks and Sutton Public Schools. The Boston Globe and WCVB reported that local technical teams worked to contain the incident, reduce operational impact, and add additional security controls.
Separately, the Global group appeared publicly linked to the case. Dexpose said it posted an extortion notice and threatened to leak data unless it heard from a representative, while HookPhish linked the incident to the official site suttonma.gov.
How did the Fort Smith case evolve?
Fort Smith said its forensic investigation into the cybersecurity incident was close to wrapping up, that the threat had been contained, and that it had already identified the access vector and the scope of compromised information. According to Talk Business & Politics, the attack originated with the Fort Smith Police Department.
The same coverage said data was exfiltrated and that several systems had already been restored, including payments at City Hall, Fort Smith District Court, and the Fort Smith Landfill. Ransomware.live also listed the city as a victim attributed to the Interlock group under the official domain fortsmithar.gov.
On Sept. 17, Fort Smith said it was reviewing files from a dark web post that claimed to contain data copied from the city and police networks. Local officials said they could not yet comment on the contents because the analysis would take time and resources.
The city also said the post did not affect network security or recovery efforts, and that public-facing services remained online.
Sources
- Sutton town officials, public school system investigating cybersecurity incidentbostonglobe.com· Boston Globe
- Statement Regarding Cyber Incidentsuttonma.gov· Town of Sutton
- Global Ransomware Group Attacks Town of Sutton, Massachusettsdexpose.io· Dexpose
- Victim: City of Fort Smith Arkansasransomware.live· Ransomware.live
- Ransomware Group global Hits: TOWN OF SUTTONhookphish.com· HookPhish
- Cybersecurity incident affects Sutton town, school networkswcvb.com· WCVB
- Fort Smith computer attack investigation nearing an endtalkbusiness.net· Talk Business & Politics
- Interlock claims responsibility for Fort Smith computer system attacktalkbusiness.net· Talk Business & Politics
