What Happened
The Town of Dedham has been notified that OnSolve CodeRED, the service provider for our emergency alert system (also referred to as our reverse 911 system), experienced a targeted cybersecurity attack by an organized cybercriminal group. This breach has affected CodeRED clients nationwide, and our emergency alert service is currently unavailable.
Important: This incident is contained within the CodeRED system only and does not affect any other municipal systems or services.
What Information May Be Affected
Our provider has informed us that data from the CodeRED platform may have been compromised. The affected information appears to be limited to:
- Name
- Address
- Email address
- Phone numbers
- Passwords used to create CodeRED alert profiles
What You Should Do Immediately
If you use the same password for your CodeRED account on any other website or service, change those passwords right away. This is the most important step you can take to protect your accounts.
At this time, there is no evidence that any user information has been used for identity theft or fraud.
What Our Provider Is Doing
OnSolve has taken the following steps:
- Secured their systems and launched a full investigation
- Engaged external cybersecurity experts
- Decommissioned the compromised CodeRED platform
- Launched a new CodeRED by Crisis24 platform on a separate, non-compromised environment
- Completed comprehensive security audits and penetration testing on the new system
Current Alert System Status
While the new CodeRED by Crisis24 platform is currently being set up for Dedham, we have access to basic alert capabilities using publicly available phone data.
Please note: CodeRed is working to restore our existing contact list and those who subscribed to the Dedham CodeRed system as of March 31, 2025 will be added to the new system. Enrollment in the CodeRed system is voluntary and residents can add/remove themselves at any time.
The incident does not affect the federal Emergency Alert System (EAS) that residents may hear on TV, radio, or cell phones, which remains fully operational. This system is operated and managed by the Federal Emergency Management Agency (FEMA).Please continue to check the Town website, subscribe for email notifications, and follow our official social media channels for important announcements and emergency information.
Resources
If you feel you have been victimized by cyber-enabled fraud, please report the incident to the FBI Internet Crime Complaint Center at https://www.ic3.gov/. There you will also find additional resource to help you protect yourself and loved ones from fraud and cybercrimes.
Questions and Concerns
If you have additional questions or concerns about this incident, please contact CodeRED directly at crsupport@crisis24.com.
Frequently Asked Questions, provided by OnSolve
Q: Does this affect other municipal systems?
No. This incident is strictly contained within the CodeRED environment.
Q: Is the new CodeRED system safe?
Yes. The new platform resides in a completely separate, non-compromised environment and has undergone comprehensive security testing.
Q: Am I a victim of identity theft?
We have no evidence of identity theft or fraud related to this incident.
Q: Is this related to the Emergency Alert System I hear on TV/radio?
No. This does not affect the federal Emergency Alert System (EAS), which remains fully operational.
We apologize for this inconvenience and thank you for your patience as we work with OnSolve to restore full emergency alert capabilities.
Please note: We will update this page as additional information becomes available.