Cleveland Municipal Court has been closed for three consecutive days following a cybersecurity incident that has disrupted its internal systems. The court announced the closure on Monday and has since issued identical statements daily, emphasizing that the nature and scope of the incident remain unclear. Officials have taken precautionary measures by shutting down all affected systems to ensure the security and safe restoration of services.
“As a precautionary measure, the Court has shut down the affected systems while we focus on securing and restoring services safely,” the statement read. “These systems will remain offline until we have a better understanding of the situation.”
The municipal court has not provided further details on whether the disruption was caused by ransomware, data breaches, or another type of cyberattack. The Cyber Express Team reached out to the Court’s spokesperson, however, no one responded to requests for comment.

Growing Trend of Cyberattacks on Municipal Governments
This incident is part of a broader trend of cyberattacks targeting municipal governments across the United States. Just this week, Anne Arundel County in Maryland was also affected by a cyberattack, leading to the closure of several municipal offices. While these offices reopened on Tuesday, officials continue to exercise caution to protect their systems.
Cybercriminals have increasingly targeted local governments, which often operate on limited cybersecurity budgets. Last month, the Qilin ransomware group claimed responsibility for an attack on West Haven, Connecticut, forcing the city to shut down its IT infrastructure. Similarly, Columbus, Ohio, suffered a ransomware attack in July 2024 that exposed personal information of more than 500,000 current and former residents.
Court Operations on Hold
As of Thursday, February 27, 2025, the Cleveland Municipal Court remains closed to the public, except for essential staff. Officials have not provided a timeline for when normal operations will resume, stating only that they are working “expeditiously” to resolve the issue. All internal systems and software platforms will remain offline until further notice.
Residents relying on court services have been advised to monitor official channels for updates. In similar past incidents, municipalities have taken days or even weeks to fully restore their systems, depending on the severity of the attack.
Potential Impact and Concerns
Cybersecurity experts warn that disruptions like this can have significant consequences, including delays in legal proceedings, potential exposure of sensitive data, and financial losses. While no ransomware group has yet claimed responsibility for the Cleveland Municipal Court incident, similar attacks in other cities have involved demands for ransom payments in exchange for restored access to systems.
Local governments are being urged to strengthen their cybersecurity defenses by implementing regular security audits, employee training programs, and incident response plans. Given the rise in attacks, experts stress the importance of proactive measures to protect critical public services.
Cleveland Municipal Court: Ongoing Investigation
County officials have assured the public that they are taking necessary precautions to safeguard their systems. Residents are encouraged to check with individual departments before visiting municipal offices, as some services may remain limited.
In the meantime, Cleveland officials have not provided details on whether law enforcement or federal cybersecurity agencies are involved in the investigation. However, similar incidents have often required the assistance of the FBI and the Cybersecurity and Infrastructure Security Agency (CISA).
As Cleveland Municipal Court continues to assess the impact of this cyber incident, local residents and legal professionals are left in limbo, awaiting further updates on when normal operations will resume.