Report: Nevada State Hackers Evaded Detection for Months

Statewide Breach Hit 60 Agencies Before Ransomware Was Deployed Chris Riotta (@chrisriotta) • November 6, 2025

A ransomware threat actor breached Nevada's statewide government systems for several months before deleting backups and disrupting critical systems, according to an after-action report published Wednesday by the governor's technology office.

See Also: Mastercard on Agentic Payments: How AI Agents, Tokenization, and Authentication Will Redefine Digital Commerce

Analysis details how the attacker slipped into Nevada's network as early as May 14 through a spoofed administrator tool delivered via a fake website, eventually installing a backdoor that lingered even after security software flagged the malware. By August, intruders installed monitoring tools, stole credentials for 26 accounts and had managed to reach the state's password vault server.

The threat actor deleted backup volumes and deployed ransomware on Aug. 24, affecting some services at more than 60 agencies for up to ...