Administrator Kathy George read a statement prepared by the City Attorney announcing that the City of Sandstone has been the victim of a criminal cybersecurity event, with additional information posted on the city’s website. No details were provided on the nature of the incident, current systems, or any selected cybersecurity vendors or remediation contracts. This incident is a strong trigger for the city to evaluate and likely upgrade its cybersecurity posture, including network security, backups, incident response planning, staff training, and possibly cyber insurance coordination. IT and cybersecurity vendors can approach the city to offer assessments, incident response support, managed security services, or policy and training programs, positioning these as ways to prevent recurrence and address any weaknesses exposed by the attack.

The statement was prepared by the City Attorney and referenced on the city website, suggesting legal...