Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

City of Fort Smith Arkansas

fortsmithar.gov

Discovered 2026-09-15 15:31 UTC
Est. attack date 2026-09-15
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

The City of Fort Smith is committed to providing high-quality, resident-focused services to foster a thriving community. This is how they try to position themselves, but in reality, they are very negligent towards their residents and organizations within the city due to their negligent attitude towards security and lack of desire to solve problems, were compromised resulting in a major leak of confidential data over 5.6 TB of data, which includes key infrastructure facilities of Fort Smith (Public Safety System: Police Station, Fire Department, Communications Center (responsible for the 911 emergency dispatch service), Water System: including numerous water and sewer treatment plants, Information Systems: computer systems and networks that support the operation of various departments of the city). As a result of a major leak of the city, you are provided with databases and documents of all their structures (Police and Crime Information: The Arkansas Crime Information Center and the FBI Criminal Justice Information Service system are available information on license plates and driver's licenses, Confidential law enforcement data, such as personally identifiable information (PII), such as Names, addresses, and phone numbers of residents.) More than 100,000 SSNs, reports and police station files with photos from the reports, as well as software used by cyberpolice to work with phone data, as well as reports and dumps of people's phones, and most importantly, their data on the water supply system and a complete database of 911 calls and incidents.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 39

Third Party Employee Credentials: 0


External Attack Surface: 15


FortiBleed Exposure Detected

This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak (CVE-2022-40684).


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • Justin.Rosafortsmithar.gov
MX Records
  • fortsmithar-gov.mail.protection.outlook.com. Microsoft 365
TXT Records
  • google-site-verification=Kq2_QSi6qScEuARydkD-gYmy1R8R1unP2pFl2nRGVvA
  • MS=ms86513442
  • knowbe4-site-verification=c2191d0d4b76881536afb808da3f3ddd
  • atlassian-domain-verification=05KBGxS4aOvwInLkDeovuZLbTOaSKubifHZr/OpaRIXuCEqB2RSeGNPX8swiaAza
  • pqj8cbn24qfo0kml2nmvbuipe8
  • v=spf1 include:_spf.psm.knowbe4.com include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
Atlassian KnowBe4 Microsoft 365

Leak Screenshot:

Leak Screenshot