The Office of the Registrar-General (ORG), Jamaica’s government agency responsible for maintaining official records of births, marriages, stillbirths, and deaths, suffered a cyber-attack that crippled its website and potentially compromised highly sensitive personal data. The attack was detected on August 24, with initial assessments suggesting it was primarily aimed at disrupting system availability. While the agency activated its Incident Response Plan—including containment, forensic investigation, and regulatory notifications—services remained temporarily unavailable, causing inconvenience to citizens and businesses reliant on its records. The breach triggered involvement from law enforcement (Major Organised Crime and Anti-Corruption Agency) and an external security team to assess the scope of the compromise. Though the ORG claimed its security measures limited the impact, the attack’s potential exposure of national identity records (birth/marriage/death certificates) poses severe risks, including identity theft, fraud, and operational disruptions for government-dependent processes. Investigations are ongoing, but the incident underscores vulnerabilities in critical public infrastructure and the escalating threat of state-targeted cyber disruptions.