CodeRED is a third-party messaging platform used by emergency and public safety organizations across the country. Many Commonwealth agencies use CodeRED to issue notifications to residents.
Crisis24 — the vendor that operates CodeRED — has reported a nationwide cybersecurity incident involving its legacy platform. According to the company, certain user information may have been accessed without authorization. Crisis24 has indicated that this may include names, addresses, email addresses, phone numbers, and, in some cases, associated account passwords. No Commonwealth of Pennsylvania-owned IT systems were involved in or connected to this incident.
Crisis24 has advised that individuals who used the same password for CodeRED and other accounts should update those other accounts as a precaution.