Devman-claimed cyberattack disrupts Georgia court filing firm

Ransomware group Devman has claimed responsibility for a cyber incident that forced the Georgia Superior Court Clerks' Cooperative Authority to shut down its website and services, prompting warnings of continued outages across the state, according to The Record, a news site by cybersecurity firm Recorded Future.

Devman has posted GSCCCA on its leak site, alleging it stole 500 GB of data and is seeking a $400,000 payment before November 27. GSCCCA, which oversees statewide real estate and personal property records, commercial filing indexes, notary registrations, and civil case-filing for all 159 counties, initially displayed general maintenance notices before confirming that a cyberattack was underway. The agency said its staff is working continuously to ensure systems are safe before restoring availability and noted that testing remains essential "out of an abundance of caution."

The organization immediately imposed restrictions on system access beginning Friday. The attack followed closely behind a separate Nov. 12 breach at SitusAMC involving stolen accounting records and legal agreements under federal investigation.