How Is the Sault Tribe Managing the Recent Ransomware Attack?

Article Highlights
Off On

The Sault Tribe of Chippewa Indians, which operates Kewadin Casinos, faced a significant disruption caused by a recent cyber attack. Known as a ransomware attack, it severely impacted various computer and phone systems across the tribal administration. This encompassed not only the casinos but also health centers and other affiliated businesses. The tribe had to implement immediate action to counteract the assault by suspending all gaming operations starting at 7 a.m. on Monday, February 10, 2025. This unprecedented event resulted in the temporary closure of numerous tribal departments and businesses, causing significant interruptions to many routine operations and services.

Immediate Response to the Cyber Attack

Suspension of Gaming Operations

As part of the immediate response, the Sault Tribe decided to suspend all gaming operations at Kewadin Casinos. This critical decision aimed to halt any further damage and allow the IT team to assess and manage the extent of the security breach. The suspension took effect on Monday, February 10, 2025, at 7 a.m., significantly impacting the tribe’s revenue streams. The casinos form a crucial part of the tribe’s financial stability, and this disruption represents a serious economic threat. However, the tribe prioritized preventing further system compromises and data loss, opting for security over short-term financial gains.

Communication from Tribal Leadership

Sault Tribe Chairman Austin Lowes quickly addressed the community regarding the ransomware attack’s details and its extensive repercussions. In his statement, Lowes acknowledged the significant impact on multiple systems and outlined the tribe’s intention to resolve the issue as swiftly as possible. He emphasized the tribe’s commitment to keeping members and employees informed through updates on various Facebook pages. This approach aims to manage expectations and maintain transparency during the crisis. By maintaining open lines of communication, the tribal leadership seeks to build trust and ensure that everyone impacted by the cyber attack remains well-informed about ongoing efforts to restore normal operations.

Maintaining Essential Services

Administrative Functions

Despite the debilitating effects of the cyber attack, several tribal services have managed to remain operational, showing resilience amid adversity. The Sault Tribe Administration has established alternative phone numbers to remain reachable, continuing its administrative functions as best as it can under the circumstances. This has been a crucial move to mitigate the complete shutdown of services, ensuring that members still have access to essential support and information.

Health and Family Services

The Anishinaabek Community and Family Services (ACFS) exemplifies this resilience by continuing its full range of functions. This includes the Advocacy Resource Center, Family Services & Child Placement, Direct Services, and USDA programs, all of which remain operational. The tribe has provided specific phone numbers to ensure uninterrupted access to these important support services. Ensuring continuity in these services is critical, as many families and individuals rely on them for essential assistance.

Communication and Education Services

Media and Publications

In an effort to preserve communication channels, the Communications department has continued to publish its monthly newspaper. They are managing to accept submissions for news, obituaries, accomplishments, and ads through designated email addresses. This adaptability ensures that the communication flow remains active, providing a sense of continuity for the tribe’s members.

Educational Programs

Educational programs constitute another crucial area where continuity is essential, particularly for the youth. The Education Services department, which includes Early Head Start, Head Start, Child Care Center, and Youth Education & Activities, remains operational despite the cyber attack. The department has shared several contact numbers to facilitate reaching different segments of their educational services.

Support for Elders and Enrollment Services

Elder Services

Elder Services have continued to operate fully, covering meal programs, transportation, home health tech visits, outreach worker visits, and medication deliveries within Sault Ste. Marie. Additionally, all Elder Committee meetings proceed as scheduled. This sustained support is crucial for ensuring the health, well-being, and dignity of elder members, reaffirming the tribe’s dedication to caring for its oldest citizens amidst the significant disruption caused by the cyber attack.

Enrollment Department

The Enrollment department has faced some limitations due to the cyber attack, particularly in printing new membership cards. However, they continue to remain available for inquiries through a temporary contact number. Ensuring that members can still access essential enrollment information and support prevents further disruptions to their daily lives.

Impact on Enterprises and Health Services

Temporary Closures

The cyber attack has compounding effects; among them, the temporary closure of certain enterprises, including Mid Jim locations across Sault, St. Ignace, Marquette, and Munising. Updates regarding their reopening will be provided once available, keeping members informed about when these services will resume.

Ongoing Operations

Despite the ongoing challenges, some enterprises such as DeMawating Development, Sawyer Village, and Gitchi Home and Auto continue their normal operations. These businesses remain reachable for any needed services, ensuring continuity in specific areas.

Law Enforcement and Natural Resources

Law Enforcement Services

Maintaining law enforcement capabilities is essential even in the midst of a crisis. Important services like Law Enforcement & Conservation have adapted to the current situation by being unable to process new Inland Hunting and Fishing Licenses. However, they remain available for emergencies and non-emergent services as needed.

Natural Resources Division

The Natural Resources Division continues to play a vital role, focusing on harvest reporting and other environmental projects. This division remains available to answer any member inquiries, ensuring that vital environmental initiatives and resource management activities proceed without significant disruption.

Recreation and Cultural Services

Recreation Services

The recreation services, particularly at the Big Bear Arena, have adapted their operations to continue with minimal disruptions. Scheduled events proceed as normal, although payments have been shifted to cash-only transactions due to the cyber attack, with an ATM available onsite for convenience.

Cultural Services

Cultural services also play a critical role in community life, ensuring that heritage and traditions are preserved and celebrated. Language & Culture services remain fully operational, offering support through a dedicated contact number.

Legal and Judicial Services

Legal Department

The tribe’s Legal Department and Tax Office have ensured accessibility through provided contact details for any legal or tax-related queries.

Judicial Functionality

The Sault Tribe of Chippewa Indians, which runs Kewadin Casinos, recently faced a major disruption due to a cyber attack. This ransomware attack significantly compromised their computer and phone systems across various tribal administration sectors. Not only were the casinos affected, but so were health centers and other associated businesses. In response, the tribe had to take immediate action, suspending all gaming operations. This unprecedented event led to the temporary shutdown of several tribal departments and businesses, severely disrupting many routine operations and services. As the tribe worked tirelessly to resolve the issue, the cyber attack highlighted vulnerabilities and underscored the urgent need for enhanced cybersecurity measures. This incident serves as a reminder of the critical importance of cybersecurity in protecting vital infrastructure and services.

Explore more

What Makes Itransition the Leader in Dynamics 365 F&SCM?

The landscape of enterprise resource planning underwent a seismic shift in July 2026 when industry analysts at ERP Pilot officially designated Itransition as the premier partner for Microsoft Dynamics 365 Finance and Supply Chain Management. This prestigious ranking arrived at a time when global organizations were desperately seeking stable anchors for their massive digital transformation initiatives. As market volatility continues

Ethereum Faces $2,000 Resistance Amid Institutional Inflows

The Ethereum ecosystem is currently navigating a pivotal moment in its market cycle as it attempts to break through the psychologically significant $2,000 mark after months of volatility. This specific price point represents more than just a round number; it serves as a litmus test for the sustainability of the recovery that began following the market lows recorded in June.

How to Open and Use Activity Monitor on Mac

Modern computing environments demand a level of transparency that allows users to identify precisely why a high-performance machine might suddenly exhibit signs of sluggishness or unresponsiveness during intensive workflows. The Activity Monitor utility serves as the definitive administrative hub for macOS, functioning as a comprehensive counterpart to the Windows Task Manager by offering granular visibility into every active process currently

Why Is UiPath Stock Outperforming the Software Market?

Investors who closely track the enterprise software landscape have observed a significant divergence in performance as UiPath continues to navigate the complexities of the automation market with unexpected resilience and strategic clarity. While many traditional software-as-a-service providers struggled with stagnating growth rates throughout the first half of 2026, this specialist in robotic process automation successfully pivoted toward an “agentic” artificial

Why Is Identity Now the Main Entry Point for Ransomware?

The traditional image of a hooded hacker painstakingly probing a firewall for a single line of flawed code has been largely replaced by a more surgical approach involving stolen login tokens. According to a recent global analysis of over 2,100 IT and security leaders, the cybersecurity landscape has undergone a definitive shift away from the traditional reliance on software exploits