Sault Tribe Cyberattack Forces System Shutdowns

In February 2025, the Sault Ste. Marie Tribe of Chippewa Indians in Michigan was hit by a major ransomware cyberattack that forced the shutdown of computer and phone systems across tribal government offices, health centers, businesses and all five of its Kewadin Casinos beginning February 9, 2025. Tribal leaders immediately took systems offline, engaged cybersecurity experts, and refused to pay the hackers’ ransom demand, opting instead to restore operations and strengthen IT defenses. The phased reopening of the casinos began on February 26, 2025, and most services were restored in the following weeks, though some health and administrative functions continued under limited capacity during forensic review.

Estimated Cost

Gas stations & other facilities closed for 2 weeks

Threat Source

Impacts

OT IT