Crisis24 Provides Update on Cybersecurity Incident Affecting OnSolve CodeRED Platform

ANNAPOLIS, November 26 - Crisis24, a global provider of integrated risk management solutions, issued the following update regarding the cybersecurity incident that impacted its OnSolve CodeRED platform: 

On November 10, we suspended all access to the OnSolve CodeRED platform and informed customers (states, counties, municipalities and other alerting authorities) shortly thereafter. We also engaged IT Security teams and external experts to conduct a comprehensive review and forensic analysis of the OnSolve CodeRED environment.   

According to current findings, an organized cybercriminal group has claimed responsibility for the attack affecting the OnSolve CodeRED platform. We believe data associated with the platform was removed from the OnSolve CodeRED system and this may contain information for OnSolve CodeRED subscribers. We have encouraged our customers to inform subscribers who may have reused their OnSolve CodeRED password for any other personal or business accounts to change those passwords immediately.   

The platform has historically been used for mass notification and emergency alerts. Typically, our platform requires only basic contact information necessary to deliver those alerts. While certain data has appeared online, investigators have not yet confirmed whether the material originated from the OnSolve CodeRED system or determined the specific scope of any data involved. The company’s forensic investigation remains active and is expected to continue in the near term. Law enforcement has been notified.  

As the OnSolve CodeRED platform was damaged during the cyberattack, we have decommissioned the platform. We have also confirmed that the incident was contained within that environment, with no contagion beyond. All customers have since transitioned to the new CodeRED by Crisis24. This platform resides in a non-compromised, separate environment that has been subjected to a comprehensive security audit. We also engaged external experts for additional penetration testing and hardening. 

No impacted customers are being billed during this transitional period. All impacted customers will be provided with unlimited message consumption until January 31, 2026, and a complimentary extension of all contracts by an additional two months at renewal.   

The CodeRED by Crisis24 platform provides alert and notification capabilities, supported by backup contact data. However, due to damage to our OnSolve CodeRED platform, backup data is current as of March 31, 2025 and some functionality, including weather alerts, are not currently available. Customers are strongly encouraged to update their data immediately.  

Platform status is as follows:  

• Publicly available phone data (current): immediately available   

• e911 data (as of March 31, 2025): immediately available   

• Community notification enrollment data (as of March 31, 2025): immediately available   

• Customer-specific contacts and groups (as of March 31, 2025): expected to be available shortly   

• Utility data (as of March 31, 2025): expected to be available shortly   

• IPAWS alerts: not currently available; agencies should continue issuing IPAWS alerts by contacting the IPAWS Technical Support Line at 1-844-729-7522   

• Shape file library: not available.   

• Automated weather alerts: not currently available; alerts must be sent manually.  

We are working hard to restore each of these services, but some time is needed. Customers should refer to their CodeRED by Crisis24 welcome materials for further details on current platform capabilities and limitations. Support is available 24/7 at 866-939-0911 or crsupport@crisis24.com.  

Crisis24 is also urging all customers of OnSolve CodeRED (counties, states, municipalities, etc.) to share this information with all their emergency management stakeholders—including law enforcement, first responders, and 911 dispatch centers—to ensure consistent communication.  

Crisis24 deeply regrets the inconvenience caused by this incident and is committed to ensuring prompt restoration and address of alert and notification needs for its CodeRED customers.