Ransomware gang Rhysida today took credit for a cyber attack on the Cleveland County Sheriff’s Office in Oklahoma. The sheriff’s office on November 20 disclosed a ransomware attack impacted parts of its internal computer system. Rhysida says it stole data from the sheriff’s office during the attack. It’s now demanding 9 bitcoin in ransom, worth about $787,000 at time of writing, within the next 7 days. To prove its claim, Rhysida posted sample images of what it says are documents stolen from the sheriff’s office. They include Social Security cards, criminal background checks, booking reports, mugshots, court filings, and medical records. The Cleveland County Sheriff’s Office has not verified Rhysida’s claim. We do not know what data was compromised, how many people might be affected, how attackers breached the CCSO’s network, or if the CCSO did or will pay a ransom. Comparitech contacted the Cleveland county Sheriff’s Office for comment and will update this article if it replies. “The Cleveland County Sheriff’s Office was recently impacted by a ransomware attack affecting parts of our internal computer system,” says a November 20, 2025 Facebook post that has since been removed. “There is no interruption to public safety services. Deputies are responding to calls, 911 is fully operational, and our daily operations continue. County IT, which manages the county’s network, is actively working to resolve the issue. We are still assessing the full scope of the incident and wil