08/18/2025
Alleged Ransomware Attack on Township Server – What I Know and What I Don’t
On July 26, 2025, our township server was allegedly hit by a ransomware attack. That is how the incident has been described by other board members, but I have not seen confirmation beyond those statements. I was not informed by township officials at the time. I learned of this incident from a resident on July 30, after a Special Meeting to discuss the resignation of the Township Fire Chief and Assistant Fire Chief.
After confirming the situation with the Township Supervisor, I requested details. I sent the following questions to both the Supervisor and Clerk:
1. Why was the full board not informed immediately?
2. What systems or data were accessed, compromised, or stolen?
3. What actions have been taken to investigate and contain the breach?
4. Has law enforcement been contacted? If so, when and by whom?
5. Have all legal obligations under Michigan law, including breach notification, been followed?
6. Why have residents not been formally notified?
The Clerk did not respond to my email. On July 31 at 7:30 p.m. — five days after the incident and three days after its discovery — the board received its first update from the Clerk. The update stated the date of the incident and that the Attorney General’s Office, Michigan State Police, and the township’s IT consultant had been contacted.
The next board update came from the Supervisor on August 1, with no new substantive details. Board members were told we are not to speak publicly about the incident and that attorneys will provide statements.
As one trustee, I have no idea whether any personal information was compromised or accessed. I am still waiting on an update from the Clerk or Supervisor. This lack of timely communication to the board and the public is unacceptable. I will continue pressing for answers and for residents to be informed.
— Corey Ribble
Orangeville Township Trustee
