The CodeRED data breach occurred in late 2025, affecting subscribers to its emergency notification service. Local governments using the platform disclosed the incident and provided updates to their respective communities.
Confirmed data types exposed in the breach include usernames, phone numbers, email addresses, and passwords. While some reports note that passwords may have been inactive or unreadable, the specific impact varied by jurisdiction. The exact total number of affected individuals nationwide has not been specified, though approximately 13,000 subscribers were affected in Marblehead, MA. There is no evidence of first/last names, addresses, SSNs, medical, or financial data being compromised.
Details and the full scope of the breach may continue to emerge as investigations conclude and affected entities provide further information. Local governments advised users to change passwords (though some were later clarified as unnecessary for inactive accounts) and be vigilant against phishing.