Government of Guam Activates Cyber Incident Response; Global Vulnerability Under Investigation
Governor Lourdes A. Leon Guerrero today confirmed that the Government of Guam is actively responding to a widespread cyber incident linked to a critical zero-day vulnerability affecting cPanel-hosted websites globally.
Governor Leon Guerrero and Acting Governor Joshua F. Tenorio have been fully briefed. An immediate, government-wide assessment of all potentially impacted agencies has been ordered.
Preliminary information indicates that multiple guam.gov websites may be affected as part of a broader global event impacting systems across multiple jurisdictions. At this time, the full scope and scale of impact remain under active investigation.
Out of an abundance of caution, worst-case scenarios under review include potential data disruption, deletion, or encryption consistent with ransomware-type activity. There is no confirmation at this time of any breach involving sensitive personal information.
The Office of Technology (OTECH) is leading response and recovery efforts, working in coordination with hosting partners to secure systems, assess integrity, and restore services using available backups where possible. Immediate patching and system hardening measures are being implemented across all applicable platforms to prevent further exposure.
The Mariana Regional Fusion Center (MRFC) and federal partners, including the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA), have been notified and are engaged, as this incident appears to be part of a large-scale global cyber event.
“This is a serious situation, and we are treating it with urgency and discipline,” said Governor Leon Guerrero. “Our focus is clear: secure our systems, protect the public, and restore services safely and as quickly as possible.”
At this time, there is no impact to emergency response operations. The Guam Homeland Security and Office of Civil Defense website remains operational. Government services continue through alternate channels where necessary.
The Office of the Governor urges the public to rely only on official government communication platforms for updates and to remain cautious of phishing attempts or fraudulent websites.
The community is advised to report any suspicious activity relating to the subject to the MRFC at (671) 475-0400 or via email at mrfc@ghs.guam.gov, following the Department of Homeland Security’s campaign, “If You See Something, Say