CodeRED Security Breach

The City of Kettering and thousands of local government and public safety agencies across the country use an external communication platform called OnSolve CodeRED to send emergency alerts. That platform was taken offline in mid-November while the company investigated a security breach.

After recently receiving additional information, we want to share what we know with our residents.

What happened? OnSolve CodeRED, which the City uses for emergency alerts, was the victim of a targeted cyber-attack by an organized cybercriminal group.

Whose information is in CodeRED's database? Residential landline telephones automatically receive CodeRED messages. Businesses or individuals who want to receive emergency notifications on their cell phone must register for CodeRED on their own.

Was my user data affected? We were recently informed that data was removed from the system, including contact information of CodeRED users, including names, addresses, email addresses, phone numbers and/or associated passwords used to create user profiles for alerts. If you use the same password on CodeRED and other personal or business accounts, you should change the password on your other accounts. You cannot access your CodeRED account at this time.

How will the City share information if there is an emergency? If there is a local emergency, please follow updates on our website, Facebook page or local media outlets. Links to OnSolve CodeRED are being removed from our website.

Does this impact 9-1-1? No. CodeRED is a standalone notification system that is separate from what the City uses for handling 9-1-1 calls.

What happens next? The City has requested access to the new CodeRED platform run by Crisis24, and we are awaiting account activation. We will keep you informed once a new platform is ready to use and if we receive any other updates about this cybersecurity incident from CodeRED.

What specifically should you do?

• Recognize that CodeRED will not be operational for the short term.
• Contact CodeRED at 866-939-0911 if you have further questions, but please be patient as the company is in the middle of an emergency.

Unfortunately, rising cybersecurity threats and data breaches have affected many organizations. Protecting yourself involves a combination of good practices and awareness. Here are some steps you can take:

• Use strong, unique passwords and change them regularly.
• Enable two-factor authentication as an extra layer of security.
• Avoid clicking on links or downloading attachments from unknown or suspicious emails.
• Stay up to date on software updates to protect against the latest security vulnerabilities.
• Install reputable antivirus and anti-malware software.
• Be mindful when using public WiFi.
• Regularly back-up important data.

We know these types of messages are concerning. By keeping you informed, we hope to provide you with the knowledge and tools to protect your data and stay vigilant against potential threats.