INE Security has warned that US local governments are facing a surge in cyberattacks. As state and local municipalities move to digitise public services, websites and emergency systems have become prime targets for criminals seeking to disrupt essential community infrastructure.

INE Security’s warns that as cities and towns move critical services online, from tax payments and permit applications to emergency response systems, they’re creating an expanded attack surface that cybercriminals are aggressively exploiting.

What started as a digital transformation for citizen convenience has evolved into a significant security crisis affecting communities worldwide.

In 2024, a major US city watched its emergency response system go offline for hours when attackers flooded it with bogus traffic. Citizens couldn’t get through to 911. Traffic lights stopped working. The city went analogue overnight.

“We’re seeing a fundamental shift in how attackers think about government targets,” said Dara Warn, CEO of INE Security. “It’s not just about data theft any more. When you can shut down a city’s 911 system or crash their traffic management network, you’ve got leverage. The technical complexity of these attacks has jumped significantly, and now we’re seeing multi-terabit campaigns overwhelming traditional defences in minutes.”

“Most municipal IT set-ups weren’t built for this level of assault,” Warn said. “You’ve got legacy systems running critical services, limited budgets for security upgrades, and IT staff who may lack specialised cybersecurity training to handle these advanced threats. When someone launches a 10-terabit attack against your traffic management system, having IT staff trained in high-level network security expertise is critical.”