Town of Jupiter Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 21, 2020, the Town of Jupiter appeared on a leak site maintained by the revil ransomware group. Public records indicate only that the group listed the municipality and asserted possession of internal files obtained during a ransomware intrusion. No confirmed count of affected individuals, no inventory of specific records, and no independent verification of the data’s contents have been released.

What happened

The incident consists solely of the listing on the revil site. The group claims to have stolen internal data from the Town of Jupiter. No official statement from the municipality has disclosed the date of the intrusion, the method of initial access, the volume of data taken, or whether encryption occurred. The number of people whose information may be involved remains unknown.

The group behind it: revil

REvil, also tracked publicly as Sodinokibi, operated as a ransomware-as-a-service affiliate model between 2019 and 2021. Its operators typically gained access through remote-desktop services, software vulnerabilities, or compromised managed-service providers, then deployed encryption while copying selected files. A distinctive element of their activity was the maintenance of a public leak site where they posted samples or directories of data belonging to organizations that declined ransom demands. The appearance of any victim on that site constituted the group’s assertion of possession; independent confirmation of the data’s authenticity or completeness was rarely available at the time of posting.

Town of Jupiter and its sector

The Town of Jupiter is a municipal government in Palm Beach County, Florida, responsible for local services including public safety, utilities billing, permitting, and property-tax administration. Organizations of this type routinely maintain records on residents, employees, vendors, and contractors. Because local governments deliver essential services and hold data required for taxation and licensing, any prolonged operational disruption or loss of internal documents can affect both administrative functions and the privacy of individuals whose information is held in those systems.

What data was at risk

The only detail released is that internal files were allegedly exfiltrated. No list of file types, databases, or record categories has been published by the town or independently verified. Municipalities commonly store names, addresses, tax and utility account numbers, employee personnel files, and limited financial information; however, whether any of these categories were among the files referenced by the listing is unconfirmed.

Why it matters

Local-government records often contain identifying details that, if exposed, can be used for targeted fraud or account takeover. Even without confirmed publication of the files, the existence of a leak-site listing creates uncertainty for residents and staff about the future handling of their information. For the organization, the incident adds to the documented pattern of ransomware activity directed at U.S. municipalities during the same period, underscoring the sector’s exposure to extortion tactics that combine encryption with the threat of data release.

Were you affected?

Residents and employees of the Town of Jupiter have no public confirmation that their specific records were included in the claimed exfiltration. Individuals can take the following steps while awaiting any official notification:

• Review account statements and credit reports for unusual activity.
• Enable multi-factor authentication on municipal and financial portals.
• Contact the town’s administrative offices to ask whether further information or credit-monitoring support will be offered.
• Run a free exposure scan of their email address against known breach data to check for prior appearances in unrelated incidents.

No additional details have been made public since the March 2020 listing.

AICompiled with AI assistance from public sources and published under our editorial standards.