The Delavan City Council this week confronted the growing reality of cyber threats to municipal systems, debating whether to purchase insurance coverage designed to protect against digital attacks.

Police Chief Michael Evans strongly urged the council to secure cyber insurance, warning that the city’s systems remain vulnerable without such protection. “The risks are real, and the consequences of a breach could be devastating for the city operations and residents alike,” Evans said.

The council reviewed an offer of coverage from a carrier, but Alderman Douglas Bury raised concerns after noting language in the cover letter that questioned the solvency of the provider. Following the discussion, Alderman Joe Watts moved to table the matter, with Alderman Joshua Lusher seconding. The motion carried unanimously, with council members agreeing to seek quotes from other carriers before proceeding, but all agreed on the necessity of coverage.

Lessons From East Peoria’s Breach

The urgency of Delavan’s deliberations was underscored by a recent cyberattack on neighboring East Peoria. Officials there confirmed that the city’s third-party emergency alert system, OnSolve CodeRED, was breached “recently” by what they described as an organized cybercriminal group.

For years, East Peoria relied on CodeRED to send alerts through its police, fire, public works, and communications departments, as well as to share information from City Hall, EastSide Centre, special events, and the Fon du Lac Park District.

According to Crisis24, the company behind CodeRED, data associated with the program was removed during or after the attack and “appears to have been published online.” The compromised information may include names, addresses, email addresses, phone numbers, and passwords linked to subscriber profiles.

Officials stressed that the breach was contained to the platform, which has since been decommissioned. A replacement system, “CODERED by Crisis24,” has been launched using backup data, transferring all residents who signed up by March 31. Crisis24 issued a statement expressing regret and urging subscribers to change any reused passwords immediately.

A Growing Threat

The East Peoria incident highlights the vulnerabilities cities face as they rely more heavily on digital platforms to serve residents. For Delavan, the breach serves as a cautionary tale and a reminder of the importance of proactive measures.