UPDATE – New details released on Carolina Beach cyberattacks that stole nearly $488K
CAROLINA BEACH, NC (WWAY) –Town officials in Carolina Beach have released new details about two cyberattacks that resulted in the theft of nearly $488,000 late last year.
As WWAY reported on Tuesday night, Town Manager Bruce Oakley said the town has investigated two cybersecurity incidents.
Town leaders held a press conference today, Feb. 11th. According to the town, the attacks occurred in December 2025 and led to the loss of approximately $487,994.80.
The Carolina Beach Police Department, working with the FBI, investigated the incidents and determined they are connected to an ongoing federal investigation in another state. Officials said the crimes are international in scope.
The town said the attacks came amid an increase in cybercrime targeting government agencies. Prior to the incidents, the National Guard had completed a review of Carolina Beach’s cybersecurity vulnerabilities.
Town Manager Bruce Oakley says they believe the hack occurred during policy changes after the assessment.
“We were making these changes; we don’t know if while we were making the changes, the perpetrators saw that we were making all these changes and decided to act at that time because we do know they were monitoring us, we thought maybe that’s what happened,” said Oakley.
Town staff and the town’s IT contractor have been implementing recommended security upgrades, and officials said additional policies have been adopted by the Town Council to strengthen protections and reduce the risk of future attacks.
Mayor Lynn Barbee was quick to defend the town’s efforts and how it handled the cyberattacks.
“I am pleased to announce that as of today, we believe all town policies were followed, and no town staff are implicated in this incident,” said Barbee.
Barbee says it hopes to get partial recoup through an insurance claim, and what isn’t recovered will come out of the town’s general fund.
Town leaders said they will continue working with cybersecurity experts, law enforcement and their IT provider to monitor threats and improve preventive measures.
