Ransomware gang threatens Cheyenne and Arapaho Tribes after shutting down schools

The federal government of the Cheyenne and Arapaho Tribes is being extorted by cybercriminals after a ransomware assault shut down its colleges and demanding techniques in January. 

The Rhysida ransomware gang took credit score for the assault this week and demanded 10 bitcoin, or about $660,000, in alternate for not leaking info stolen from the techniques of the Cheyenne and Arapaho Tribes, a federally acknowledged authorities headquartered in Concho, Oklahoma.

Officers beforehand confirmed the ransomware assault in January. 

The tribal authorities mentioned the cyberattack started on December 8, 2025, when its IT staff found an tried intrusion by menace actors. Techniques have been shut down and the tribe labored with its insurance coverage supplier on the restoration effort. 

A follow-up assertion from tribal governor Reggie Wassana confirmed they handled a ransomware assault and federal authorities have been introduced in to assist. 

“The criminals have focused lots of of notable corporations akin to Goal, Xerox, Carnival Cruises, Blue Cross Blue Defend in addition to native hospitals and airways. Mockingly, it’s the excessive profile and monetary success of our tribe that made us a chief goal,” he mentioned in a letter to the tribe. 

“Let me be clear: This was a terrorist assault, and WE DID NOT NEGOTIATE NOR SURRENDER. These criminals haven’t, and won’t, obtain one cent from the members of the Cheyenne and Arapaho Tribes.”

Wassana dedicated to proceed paying staff of the native Fortunate Star On line casino because the restoration effort continued via January. The tribe governs about 12,000 residents.  

The tribe’s Division of Schooling additionally warned the assault took down its computer systems, e-mail and telephone system. College students weren’t penalized for any delays in returning assignments on account of the web outages. 

Tribal administrations throughout the U.S. have been focused by ransomware gangs in 2025. Town of Durant, simply three hours away from Concho and the capital of the Choctaw Nation, was hit with a cyberattack final 12 months, and tribes in Minnesota and Michigan have been additionally attacked by ransomware gangs. 

The Rhysida ransomware gang has repeatedly focused governments throughout the globe, together with Kuwait’s Finance Ministry, in addition to the transportation division of Maryland, town of Seattle and town of Columbus, Ohio.

Be taught extra.