Update - Conclusion of CodeRED Cybersecurity Investigation 

OnSolve, the provider of the legacy CodeRED emergency alert platform, has completed its investigation into the cybersecurity incident previously reported.

According to the final update provided by OnSolve on December 22, 2025, OnSolve and its external forensic experts found that the incident involved a targeted ransomware attack on the legacy CodeRED environment. While the attacker accessed the system, investigators did not find evidence that data was exfiltrated from City of Weston users.

The investigation determined that limited subscriber information affecting a small percentage of users was exposed across two legacy data sets:

• One data set contained usernames, phone numbers, and inactive, outdated passwords that were deactivated and changed in 2015 during a prior platform migration.
• A second data set contained usernames with encrypted passwords. These passwords are not readable or identifiable, and there is no evidence that encryption keys were accessed.

Importantly, OnSolve has confirmed that:

• No active passwords were involved
• No first or last names, addresses, or other sensitive personal information were included in the exposed data
• There is no indication that the information has been published online

Out of an abundance of caution, users were previously advised to change passwords if the same password was used elsewhere. Based on the final findings, OnSolve has clarified that the exposed data did not include active passwords.

CodeRED Data Breach Information from November 24

The City was first notified on Nov. 11, 2025, that the third-party platform used for emergency alerts, CodeRED, had been impacted by a cybersecurity incident. They advised that there were no indications that any user data bad been compromised, however the system had proactively been taken offline. 

Today, we were notified of the following: 

“Dear Valued Customer,

 Further to our previous communications, we’d like to provide you with an update regarding the cybersecurity incident which damaged the OnSolve CodeRED environment in a targeted attack by an organized cybercriminal group. Our forensic analysis continues to indicate that this is an incident strictly contained within the OnSolve CodeRED environment with no contagion beyond.

We have learned that data associated with the legacy OnSolve CodeRED platform was removed from our systems. While there is currently no indication that this data has been published online, we are proactively informing you that it may be leaked.

 It appears that the impacted dataset may contain contact information of OnSolve CodeRED users: name, address, email address, phone numbers, and/or associated passwords used to create user profiles for alerts. If the same password is used by users for any other personal or business accounts, those passwords should be changed immediately.”

Because of this incident, the CodeRED enrollment link on the City’s website is unavailable.  Data is being moved to a new emergency alerting system and we will share those details on registration in the coming week.  Not everyone who is registered with CodeRED has or uses a password.  IF you used a password, and use that password in other areas, you should change the password anywhere else that you are using it. 

We will provide further updates as we receive them from CodeRed. Thank you for taking proactive steps to keep your information safe.

Residents and visitors are encouraged to follow the City of Weston on Facebook, X, Neighbors and Nextdoor for updates on severe weather, public safety information, and other emergency notifications.