Suffolk County suffered a ransomware attack that affected lawmakers, businesses and residents across the East End and beyond. Suffolk officials took the county website offline to contain the damage and started incrementally restoring access about three weeks later. However, hackers claimed responsibility for the attack and posted on the dark web screenshots of some of the documents stolen from county servers and later gave threats to release more if the county did not pay a reward. Although the attack affected the entire county and its business but the real estate, as attorneys, brokers and title insurance providers were most affected by it.

In 2022, Suffolk County fell victim to a BlackCat ransomware attack, where hackers installed remote-access tools, exfiltrated sensitive files, and encrypted critical systems. The breach crippled core government services for weeks, exposing the personal data of hundreds of thousands of residents, including financial and identification records. The county incurred $25 million in taxpayer-funded recovery costs, covering system restoration, forensic investigations, and operational disruptions. The attack highlighted vulnerabilities in municipal cybersecurity, prompting state-level reviews and reinforcing the need for stricter incident reporting laws, such as New York’s 72-hour disclosure mandate for cyber incidents. The prolonged outage disrupted public services, eroded trust, and demonstrated the high-stakes consequences of ransomware on local governance, aligning with broader trends of escalating attacks on underprepared government entities.