A Cyber Incident in the Municipality of Arad

This quick case outlines alert of a potential hack into the information systems of the municipality of Arad (Israel) in 2022, raising concerns about the possible leakage of highly sensitive information from the municipality's psychological service systems, and delves into the dilemmas confronted by city leaders in the initial hours following the discovery of the incident. It provides a brief background on the city, the educational psychological services system at the city as well as the information systems supporting this crucial service. It then provides a chronological account of the events and decisions taken by the city leadership. The objective of this case is to prompt discussions immediate responses and necessary actions when detecting cyberattacks, particularly focusing on information leakage incidents. It also aims to stimulate planning for preparedness and actions essential for effective crisis management.