Wayne County, Michigan Listed by interlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Wayne County, Michigan, was listed on October 02, 2024, by the ransomware group known as interlock. Public reporting indicates the group claims to have exfiltrated internal files in a ransomware attack, including more than 130 SQL databases, confidential criminal investigation files, and personal data of residents. The number of people affected remains unknown, and independent confirmation of the full scope is limited.

This listing matters because county governments hold sensitive records that touch residents’ daily lives, from public safety to personal identifiers. When such material is claimed to have been taken, the practical risks of exposure and further misuse become immediate concerns for those whose information may be involved.

Inside the incident

According to available public details, Wayne County, Michigan, appeared on interlock’s leak site on October 02, 2024. The group stated that it had conducted a ransomware attack and exfiltrated internal files. Its listing specifically claimed “more than 130 SQL databases,” along with “a large collection of confidential criminal investigation files” and “personal data of residents.” No further technical details about the intrusion method, the precise date of the attack, or the total volume of data have been disclosed in the reported summary. The number of individuals potentially affected is listed as unknown. Public detail beyond the group’s own claims remains limited, and the listing itself constitutes an unverified assertion by the threat actor rather than a confirmed forensic finding.

Inside interlock

Interlock is a ransomware operation that has been observed conducting double-extortion campaigns: encrypting systems while also stealing data and threatening to publish it if demands are not met. Like other groups in this category, it maintains a leak site where it posts victim names and sample claims about stolen material to increase pressure. Public reporting on interlock describes a relatively recent entrant that has targeted organizations across multiple sectors, often advertising large volumes of databases or internal documents. The group’s typical pattern involves claiming possession of sensitive files and offering them for sale or release. In this case, the listing of Wayne County is presented solely as the group’s claim; no independent verification of the specific contents or the success of any encryption is provided in the available facts.

Who is Wayne County, Michigan?

Wayne County is a county government in the state of Michigan, United States, serving a large population that includes the city of Detroit and surrounding communities. County administrations of this type manage a wide range of public services: courts, law enforcement support, property records, vital statistics, social services, and administrative databases. They routinely hold criminal investigation materials, resident personal information, financial and tax-related records, and operational data necessary for day-to-day governance. A breach affecting such an entity is consequential because the data often spans many years and many residents, and because county systems frequently interconnect with state and local partners. Even when the exact scale is unconfirmed, the potential reach of any compromised county repository is inherently broad.

What data was at risk

The facts name the exposed material as “internal files exfiltrated in a ransomware attack.” The group’s own listing further claims more than 130 SQL databases containing confidential criminal investigation files and personal data of residents. Exact data types beyond these claims, file counts, or confirmation of what was actually taken have not been independently disclosed. Organizations of this kind typically maintain databases that can include names, addresses, dates of birth, Social Security numbers or other identifiers, case files, investigative notes, and related administrative records. Because the precise contents remain unconfirmed, it is not possible to state with certainty which specific fields or individuals were involved. Public detail is limited to the group’s assertions and the general characterization of internal files.

Why it matters

For residents, the primary risks are identity theft, targeted fraud, and the potential misuse of personal details that may appear in criminal or administrative records. Confidential investigation files, if authentic and released, could expose witnesses, victims, or other parties to harassment or safety concerns. For the county itself, the incident raises operational and reputational challenges: restoring systems, notifying affected parties where required, and reviewing access controls. Even when encryption or full system disruption is unconfirmed, the claimed exfiltration alone creates lasting exposure because stolen data can circulate long after the initial event. The unknown number of people affected leaves many residents without clear information about whether their own records were involved, which itself generates uncertainty and the need for caution.

If your data was in this claimed breach

If you believe your information may have been held by Wayne County, treat the situation as a possible exposure rather than a claimed personal compromise. Monitor financial accounts and credit reports for unexpected activity, consider placing a fraud alert or credit freeze with the major credit bureaus, and be alert to phishing or social-engineering attempts that reference county services or personal details. Change passwords on any accounts that reuse credentials you may have shared with government portals, and enable multi-factor authentication wherever available. Official notifications, if issued by the county, should be followed carefully. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets; such scans provide an additional, independent signal but do not replace vigilance with financial and identity monitoring.

AICompiled with AI assistance from public sources and published under our editorial standards.