The State of Nevada suffered a ransomware attack on 24 August 2025 affecting approximately 60 state agencies, with disruption to services relating to health and public safety. Recovery was completed over an extended period rather than days.
State Government Is A Different Scale From A City
This desk filed municipal incidents at 26-0310 and 26-0126, where a single city lost non-emergency services. A state is a federation of agencies with different mandates, different systems and — critically — shared central infrastructure.
Sixty agencies affected simultaneously indicates the compromise reached something common to all of them: identity, network or shared hosting. That is the consolidation states have pursued for two decades on efficiency grounds, working exactly as designed and failing all at once.
Health And Public Safety Is Where Consolidation Hurts
A state agency issuing licences can stop for a week. Agencies administering health programmes and public-safety functions cannot, and they were sharing infrastructure with the ones that could.
The separation this desk credited at Foster City in 26-0310 — life-safety systems on infrastructure the ransomware did not reach — is far harder to maintain across sixty agencies than across one city hall.
Long Recovery Is The Norm And Is Rarely Reported
Public attention lands on the outage and leaves before the restoration. A recovery measured in months means agencies operating degraded, backlogs accumulating, and staff working around systems that are partially available.
That period is where most of the actual cost sits, and it is almost never quantified — the same gap this desk noted in the JLR restart at 26-0119.
Compiled from public reporting, listed below. The intrusion route and any data exfiltration scope are as reported; we have not reviewed state incident documentation. Corrections: corrections@forensicpost.com.
- How a ransomware gang encrypted Nevada government’s systemsBleepingComputer