Cobb County Hit by Major Data Breach in Hacker Attack

By Frank Jones, CISSP   Published: 05/03/25   Updated: 10/25/26   2 min read

At a glance

Hackers get into Cobb County’s network

Another local government has been hit. This time it is Cobb County, Georgia, where hackers got into the county’s network and copied files containing residents’ and employees’ personal information. It won’t be the last.

Details of the Breach

According to the county, files were accessed and copied from a limited number of Cobb County systems between March 6 and March 21, 2025. The data may include names, Social Security numbers, driver’s license or state ID numbers, and financial account information. People whose data was taken now face a risk of identity theft.

The Qilin ransomware group later claimed responsibility. The county said it reported the incident to law enforcement and worked with outside specialists on the investigation.

Why local governments keep getting hit

Pressures on Local Governments

Cobb County now joins a long list of towns and counties hit by cybercriminals. Budgets are tight. Many local governments still run outdated technology, which security experts say makes them especially easy targets for ransomware crews looking for quick payouts.

Evolving Tactics of Cybercriminals

The attack shows how criminal tactics are changing. Ransomware groups now steal data before encrypting systems, then threaten to publish it. Governments need to put real money into better security and staff training.

What the county is doing

Immediate Actions Taken

Cobb County said it moved to secure its systems and launched an investigation. It also mailed notices to people whose information was known to be affected, a step that shows why a prepared response plan matters.

Long-Term Prevention Strategies

How do you stop the next one? Multifactor authentication and regular security audits are the basics, along with outside security partners who can help when an attack hits.

Lessons for other local governments

The attack on Cobb County is a hard lesson about the steady threat local governments face. Residents who got a notice should review their account statements and consider a credit freeze. Other counties should check their backups and access controls before attackers do it for them.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.