Friday , October 23 2026

12 Days to Pay Ransom: Palo Alto County Sheriff Office Ransomware Attack

The Palo Alto County Sheriff Office seems to have become the latest victim of a ransomware attack after hacker collective Play ransomware added it to its list.

A deadline of 12 days to pay a ransom has been set by the ransomware group, following which they have threatened to publish the stolen data. The amount of ransom demanded has not been disclosed.

On April 9, the Play ransomware group published a post sharing details of the alleged Palo Alto County Sheriff Office ransomware attack.

The post, which had received over 212 views at the time of writing, also displayed April 21 as the date when the stolen data would be published.

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Update now! PHP2Shell: Critical PHP vulnerabilities patched

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
Update now! PHP2Shell: Critical PHP vulnerabilities patched

Trump says data centres should pay dividends to local community

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...
Read More
Trump says data centres should pay dividends to local community

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...
Read More
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...
Read More
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes

Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...
Read More
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes

Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In

The Indian Computer Emergency Response Team (CERT-In), which is the government's cybersecurity arm, has issued a "critical" rated advisory after...
Read More
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In

Despite the hacker collective taking responsibility for the alleged Palo Alto County Sheriff Office ransomware attack, the official website seems to be functioning fine and was accessible at the time of writing.

The Cyber Express has reached out to Sheriff John D. King to confirm the cyber incident. However, we are yet to receive a response.

Former Chief Deputy John King was sworn in as the Sheriff of Palo Alto County on September 1, 2022. King served Emmetsburg and Palo Alto for over two decades before taking charge as the Sheriff.

Ransomware groups target Sheriff’s Office

Earlier, the Sheriff’s Office of Washington County in northern Florida was targeted by the LockBit ransomware group in February 2023.

Details of over 500 Washington County Sheriff’s Office present and past employees were threatened to be leaked. The data of the employees included residential addresses, phone numbers, and social security numbers.

The deadline for paying the ransom was March 30.

Reacting to the devious act, the then Sheriff Kevin Crew said at a Washington County Commission meeting, “There is no perfect system. There is no 100% safe this will never happen to you, but there are things you can do that make it a whole lot harder.”

Crew further said, “Now I’ve got that word along with and not just the people that work there we’re up to about 500 people that work there as far back as probably 1970s, 1980s.”

We’re up to 500 people so trying to figure out how to get a hold of all these people because their personal data has now been compromised.

The authorities declined the ransom demands following which stolen employee data was allegedly leaked online. They instead invested the money in tech services to bring back the systems to their complete functionality.

Despite disrupting the entire system of the Sheriff’s Office for over two weeks, as discovered by authorities on February 21, calls for service remained accessible to people and staff.

The ransomware attack on the Washington County Sheriff’s Office was suspected of having originated in Russia by the officials.

he Palo Alto County Sheriff Office seems to have become the latest victim of a ransomware attack after hacker collective Play ransomware added it to its list.

A deadline of 12 days to pay a ransom has been set by the ransomware group, following which they have threatened to publish the stolen data. The amount of ransom demanded has not been disclosed.

(Photo: Brett Callow/ Twitter)

On April 9, the Play ransomware group published a post sharing details of the alleged Palo Alto County Sheriff Office ransomware attack.

The post, which had received over 212 views at the time of writing, also displayed April 21 as the date when the stolen data would be published.

Despite the hacker collective taking responsibility for the alleged Palo Alto County Sheriff Office ransomware attack, the official website seems to be functioning fine and was accessible at the time of writing.

The Cyber Express has reached out to Sheriff John D. King to confirm the cyber incident. However, we are yet to receive a response.

Former Chief Deputy John King was sworn in as the Sheriff of Palo Alto County on September 1, 2022. King served Emmetsburg and Palo Alto for over two decades before taking charge as the Sheriff.

Ransomware groups target Sheriff’s Office

Earlier, the Sheriff’s Office of Washington County in northern Florida was targeted by the LockBit ransomware group in February 2023.

Details of over 500 Washington County Sheriff’s Office present and past employees were threatened to be leaked. The data of the employees included residential addresses, phone numbers, and social security numbers.

The deadline for paying the ransom was March 30.

Reacting to the devious act, the then Sheriff Kevin Crew said at a Washington County Commission meeting, “There is no perfect system. There is no 100% safe this will never happen to you, but there are things you can do that make it a whole lot harder.”

Crew further said, “Now I’ve got that word along with and not just the people that work there we’re up to about 500 people that work there as far back as probably 1970s, 1980s.”

We’re up to 500 people so trying to figure out how to get a hold of all these people because their personal data has now been compromised.

The authorities declined the ransom demands following which stolen employee data was allegedly leaked online. They instead invested the money in tech services to bring back the systems to their complete functionality.

Despite disrupting the entire system of the Sheriff’s Office for over two weeks, as discovered by authorities on February 21, calls for service remained accessible to people and staff.

The ransomware attack on the Washington County Sheriff’s Office was suspected of having originated in Russia by the officials.

Check Also

Qwen

Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia

Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks …