County staff: Code Red mass-notification vendor was breached; new system being implemented

Craven County staff reported at the Dec. 1 meeting that the OnSolve Code Red mass-notification platform used by the county and many jurisdictions nationwide was targeted by an organized cybercriminal group and that some registrant data may have been published.

Amber, who has worked closely with Emergency Services on notifications, said the vendor verified that the information was published online though it could not confirm whether every published record came from OnSolve's Code Red. She warned residents to change passwords if they used the same password for multiple accounts and explained the county has a new system in place; staff trained on the new system and will reach out to residents with instructions on how to register.

Commissioners asked whether cities were affected; staff said anyone registered on the impacted OnSolve platform could be at risk and that the acquiring company will continue using the Code Red name on a different platform. No personal details beyond broad categories (email, phone number, mailing address) were confirmed in the public presentation.