Quick answer: In March 2023, ransomware disrupted access to Camden County Police Department investigative files and internal administrative systems. NBC reporting said 911 and public safety response were not affected. This article revisits that historical incident and the readiness lessons it raises.
What happened in Camden County?
SEVN-X’s Matt Barnett joined NBC10 to discuss the incident. Reporting published April 6 and updated April 7, 2023 described inaccessible electronic case files and delays to some investigations. The January 2025 publication date on this page should not be confused with the incident date.
The reporting did not establish a confirmed attacker or initial access method. A possible email-related entry point was under investigation; it should not be presented as a proven cause.
Watch the NBC10 report
Watch the NBC10 report on YouTube if the embedded player does not load.
What public-sector leaders can take from this incident
Critical service availability and access to supporting records are different recovery problems. An agency can keep responding to calls while investigators lose access to the files they need. Plan and test recovery around those dependencies.
- Map essential workflows. Identify which records, identity systems, applications, and vendors each service depends on.
- Test restoration. Verify that protected backups can restore usable records and applications within operationally acceptable timeframes.
- Exercise decisions. Practice who authorizes containment, how teams communicate, and how services continue during a disruption.
Suspect ransomware? Start with coordinated containment
Activate your incident response plan and involve qualified responders. Coordinate isolation of affected systems, preserve relevant evidence, and use a trusted communication channel outside the affected environment. CISA’s #StopRansomware Guide provides a response checklist.
Frequently asked questions
When did the Camden County Police ransomware incident happen?
NBC reporting placed the start in mid-March 2023 and reported on the incident in April 2023.
Did the attack interrupt 911 service?
A department spokesman told NBC that 911 call systems and public safety responses were not affected. That statement does not mean all internal systems were available.
Was the entry point confirmed?
No confirmed entry point was established in the cited reporting. A possible malicious email was being investigated.
