cyfenced.com →

[ Ransomware claim · qilin · 24 Oct 2026 ]

Heber City, UT

The ransomware group qilin named Heber City, UT (United States) on its leak site on 24 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.

Confirmed by the organisation Government & Defense

[ Status ]Has the attack been confirmed?

Heber City said a cyberattack on 10 October 2026 breached its IT network, was quickly contained and that systems were back online, with the FBI assisting and no essential services suspended, as reported by KPCW and KUTV in mid-October 2026.

[ The organisation ]Who is Heber City, UT?

What it does
Heber City is a municipality in northern Utah and the county seat of Wasatch County. The city government provides local services such as utilities and billing, permits and other municipal services for residents and businesses.
Based in
Heber City, Wasatch County, Utah, United States
Founded
Incorporated as a town in 1889 and as a city in 1901
Size
A city of 16,856 residents at the 2020 census
Who it serves
The city serves its residents, local businesses and visitors to the Heber Valley, who use services such as utility billing and online payments through heberut.gov.

[ Impact ]Who could be affected

Residents and businesses could see delays to city services such as billing, permits or records requests while systems are checked. If personal information held by the city were affected, residents and city staff could be at risk of targeted scams.

In government & defense generally: Residents can lose access to local services such as permits, benefits and records, and public bodies hold personal data on a large share of the people they serve.

[ The attacker ]About qilin

Qilin, also known as Agenda, is a ransomware-as-a-service operation that US health authorities have warned about. It gets in through phishing, stolen remote access credentials and vulnerable public-facing systems, then copies data and threatens to publish it on its leak site.

qilin has claimed 126 organisations in the last 30 days, most in United States, Germany and Mexico, and mostly in professional services, manufacturing and other. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.

qilin on Ransomware.live

Other organisations qilin has named

[ What to do ]If you are a customer, partner or neighbour

  1. Pay city bills only through the official heberut.gov site or known city contact points, and be wary of unexpected payment requests.
  2. Treat emails, texts or calls claiming to be from the city about overdue bills or account problems with caution and verify them by calling the city directly.
  3. Watch for any notice from Heber City about whether residents' personal information was involved.
  4. Businesses that exchange invoices or bank details with the city should confirm any change of payment details by phone using a known number.
Researched with AI from the sources on this page on 26 Oct 2026. Facts can change: check the organisation's own announcements.

[ Similar claims ]Other government & defense organisations in United States