Thousands of Coloradans’ Data Possibly Exposed in Alert System Data Breach

I read a concerning news article earlier today stating that thousands of people in Colorado possibly were the victims of an identity theft incident. A breach of data occurred through the CodeRED Emergency Alert System, which is responsible for sending out notifications regarding fires and flooding as well as many other emergency situations, therefore this is highly significant news.

What Happened?​

The CodeRED System serves numerous communities including Douglas County, Weld County and Thornton.

According to OnSolve (the operator of the CodeRED System), there has been a cyber attack on the service.

The hacker may have taken:

• Names
• Addresses
• Email addresses
• Phone numbers
• Passwords

They are still checking how much data was taken, but they know the problem is serious.

Why Is This Important?​

Because CodeRED is used in emergencies, it is very important that if anybody can access these users’ information, they can also access:

• Unauthorized emergency alerts
• Scams
• Phishing scams
• Have access to all of someone else’s accounts using the same password.

If you do use the same password on other apps, we recommend that you change it now.

What Is OnSolve Doing Now?​

According to OnSolve, they are transferring users to a new alert system called CodeRED by Crisis24. This new alert system is designed to be more robust and secure than their old system.

However, this transition will take a considerable period of time to complete; in addition, old systems are still currently being utilized.

Now, some of the local agencies in Colorado are thinking of terminating the contract with OnSolve because of this breach and want to ensure that the public remains safe during an emergency.

How to Protect Yourself​

If you have used CodeRED, you should change your password, create a unique password for each website, be cautious of unusual emails or text messages, avoid clicking on links from unaffiliated sources, and sign up for a different emergency alert service if your city offers one.

These recommendations will help you protect your personal information.

Final Takeaways​

This situation raises the point that even vital systems such as emergency alerting systems can be compromised. As a result, it can be alarming to know that these systems we expected to keep us safe can also be targeted by a hacker.

In my opinion, it makes sense for both individuals and municipalities to establish redundancy in their alert systems. This means if one system is compromised, a backup will continue to function.

Please feel free to reach out to me for assistance with your account, password(s), or settings; I will be happy to assist you.