Ransomware attack disrupts Columbia city online services in South Carolina

The city of Columbia, South Carolina, suffered a ransomware attack discovered on October 20, 2026, that disabled several resident-facing online services. Local news outlets WACH and WLTX both reported that the city confirmed the ransomware diagnosis. The South Carolina Law Enforcement Division is currently investigating the incident alongside cybersecurity specialists. [1][3][4]

According to shattered.io, the cyberattack compromised four specific municipal systems: the MyColaSC platform, the geographic information system, Animal Services, and Parks and Recreation. The city stated that the incident affected public-facing systems and involved sensitive data. Emergency services, including police and 911 dispatch, as well as municipal water operations, continue to function normally. [1]

Ransomware operates as malware that restricts access to target systems or encrypts files, demanding payment to restore access or prevent public exposure of exfiltrated data [5]. Municipal authorities have not disclosed the specific ransomware strain, vector of entry, or whether any ransom demand was made. [1][5]