Nevada Hit by First-of-Its-Kind Statewide Ransomware Shutdown — What TEXPERS Needs to Know
Nevada's Aug. 30 ransomware shutdown shows how fast entire systems—even pensions—could be paralyzed by a single cyber strike.
The Big Picture
On Aug. 30, 2025, KTNV reported that a ransomware attack first detected on Aug. 24, 2025, forced a shutdown of Nevada's DMV offices, state agency websites, and phone lines—essentially crippling statewide government services in a single assault.
Federal agencies, including the FBI and Cybersecurity and Infrastructure Security Agency, have been deployed to investigate, as this appears to be the first documented ransomware incident to halt an entire U.S. state's digital infrastructure, according to KTNV.
Why It Matters to TEXPERS Members
- Service Disruption Risk: Like Nevada's, any sudden shutdown can pause timely operations, such as benefit distributions, enrollment processing, or contact center responses.
- Data Exposure: Nevada currently reports no confirmed personal data breaches, according to the Associated Press; However, the mere exfiltration of identifiable information can prompt notification mandates, class-action lawsuits, and reputational damage—threats that pension systems cannot afford to overlook.
- Policy and Preparedness Gap: Nevada had considered a bill to centralize cybersecurity via a state operations center—one that died in committee before the attack, according to a KTNV report updating the incident on Sept. 2. TEXPERS System Members should evaluate whether their administrations have layered cybersecurity oversight, dedicated incident response, and disaster recovery protocols—or if a similar "plane in flight" restructuring is needed.
By the Numbers
- The U.S. is now the global epicenter of ransomware, accounting for 50% of all global ransomware attacks, with a staggering 146% year-over-year increase and 3,671 attacks reported, according to TechRadar.
- Average recovery cost per incident: $1.85 million, with 72% of U.S. organizations experiencing attacks in the past year, according to Astra Security. Another survey found that average recovery costs reached $4.5 million, and 73% of CISOs fear that a successful ransomware breach could critically damage operations, according to ITPro.
- Payments are rising: In Q2 2025, average ransom payments soared to $1.13 million, more than double the previous quarter. Data exfiltration is now the modus operandi in 74% of cases, replacing traditional encryption methods, reports ITPro.
- Ransomware tactics evolve: 425 active ransomware families are now, with 34 new ones emerging in the past year. Major groups like RansomHub, Akira, and Clop have hit hundreds of victims each. Exfiltrated data volumes have leapt by 92%, reaching 238 terabytes, reports TechRadar.
- Medusa RaaS threat: The FBI and CISA warn of the "Medusa" ransomware-as-a-service, affecting over 300 victims using double extortion via phishing campaigns, reports AP News.
What's Next
- State-level push: Following Nevada's attack, cybersecurity legislation has renewed interest. Expect lawmakers to revive the SOC (security operations center) proposal or something similar during upcoming sessions.
- Federal pressure grows: The Biden administration's Ransomware Task Force, headed by the DOJ, DHS/CISA, and Treasury, continues coordinating nationwide preventive and recovery frameworks.
- Modernizing defenses: Experts urge adopting cloud-native, AI-driven, zero-trust architectures to counter evolving ransomware trends, according to TechRadar and ITPro.
Bottom Line for TEXPERS: Nevada's statewide ransomware shutdown is a red flag flashing for pension systems nationwide. If a state government can be sidelined, so can critical pension operations. Now's the time to review, test, and strengthen your cybersecurity and incident response plans—before disruption threatens your members.
About the Author: Allen Jones is the director of communications and event marketing for TEXPERS. He joined the Association in 2017. Before TEXPERS, he worked in the news media industry, producing content for newspapers, magazines, and online publications and leading newsrooms as an editor and publications manager. [email protected]