Big Spring Investigates Network Disruption

The city of Big Spring is investigating a network disruption that has affected municipal systems and interrupted electronic utility payments, prompting officials to enlist third-party cybersecurity specialists and file a catastrophe notice with the Texas Attorney General's Office.

The city filed the notice citing a "network incident" and identifying a suspension period of Oct. 12-18. The filing, which concerns the suspension of requirements under the Texas Public Information Act, lists City Attorney Andrew Hagen as the point of contact.

In an Oct. 8 public statement, City Manager Todd Darden confirmed that the city had experienced a disruption affecting certain systems and was working with its IT personnel and outside specialists to determine the nature and scope of the incident.

The city has not confirmed whether the disruption was caused by a cyberattack.

Upon discovering the issue, city officials took steps to secure the network environment and engaged cybersecurity specialists to assist with investigating the incident, containing the activity and restoring affected systems.

"The investigation remains ongoing," Darden said in the statement. "At this time, the city is still reviewing the information in order to determine what, if anything, was impacted."

The disruption was first publicly disclosed Sept. 30, when the city reported that credit card payments, electronic bank payments and its water-bill payment kiosk were temporarily unavailable, according to DysruptionHub. Residents were directed to use cash, checks or money orders, and the city waived late fees for affected payments.

In an Oct. 13 announcement, Finance Director Sandy G. Smith said the city's Water Department continued to experience computer system issues affecting its normal billing schedule.

The problems have resulted in some customers receiving water bills that appear to be due immediately upon receipt. Smith said customers would not incur late fees or penalties because of the delays, and water services would not be disconnected as a result of billing issues until normal operations resume.

The city's catastrophe notice adds another dimension to the disruption, documenting a suspension period for public information requirements in addition to the previously reported utility billing problems. The filing identifies the incident as a network issue but does not provide further details about its cause or the systems involved.

The city has not publicly identified the cybersecurity specialists assisting with the investigation or disclosed which municipal systems were affected beyond the reported payment and billing disruptions.

Officials also have not confirmed whether any sensitive information was compromised.

Darden said the city would notify affected individuals in accordance with state requirements if the investigation determines that sensitive personal information was impacted and notification is required.