Deschutes libraries back to normal following cyberattack

Deschutes Public Library operations have returned to normal following a cybersecurity attack on one of its servers that held its public relations information.

The library, which serves 95,810 patrons at its five branches across the county , hired a team of cybersecurity experts to shore up its online defenses, said Tina Walker Davis, library communications manager. Walker Davis said there were no updates to report.

“The temporary closure of the Deschutes Public Library due to a cybersecurity incident is a clear reminder that cyber threats affect every type of organization in our community,” said Sara Odendahl, Bend Chamber of Commerce CEO. “For local businesses, it underscores how important it is to take cybersecurity seriously because disruptions like these can impact operations, customers and public trust.”

In the past two years, Deschutes County has been the target of at least four cyber attacks, according to a public information request by The Bulletin.

Threats are changing for county government and public systems. Libraries in particular have been the target of phishing attacks that trick users into providing access, or data breaches that expose records and passwords.

At the same time governments need to protect the data it stores and still provide access. Following the threat to the public library system, The Bulletin requested information from the county via a public records request.

Over the past five year, only four incidents were reported, according to the county. The incidents occurred in various departments. The details provided by the county are:

Tania Mahood, Deschutes County Information Technology director, said the county has a dedicated informational security manager and a services provider that monitors the county’s online system 24/7.

“This helps us quickly detect issues and investigate any possible data breaches,” Mahood said.

The county adopted a cybersecurity plan in 2024 that included hiring an information security manager, according to a staff report from Nov. 18.

Tabletop exercises to simulate potential threats, and detailing responses to cybersecurity threats also are part of the plan, according to the staff report. The county continually refines and enhances its security safeguards, Mahood said.

Consumers can protect themselves by using strong passwords or pass phrases, enable multi-factor authentication, and update computer software.

Suzanne Roig has been a reporter with The Bulletin since 2018 covering business and health in the region. When she's not working she enjoys taking her dog, Pono, out on hikes. She can be reached at 541-633-2117, suzanne.roig@bendbulletin.com.