South Carolina capital city experiences cyberattack impacting MyColaSC platform
The City of Columbia, South Carolina, has been hit by a cyberattack that disrupted its municipal service portal, MyColaSC. State officials are currently providing assistance to help address the incident and restore city services.
Published Oct 22, 2026, 12:37 PM · Last verified Oct 22, 2026, 12:37 PM
What Happened?
The City of Columbia experienced a cyberattack that resulted in the disruption of municipal digital services. The incident affected the MyColaSC platform, which residents typically use to manage utility payments and report non-emergency service requests.
Who Was Affected?
The City of Columbia and the residents who utilize the city's online portal for public services were affected.
When Did It Happen?
This incident was reported on October 22, 2026.
How Did the Attack Happen?
The specific technical vector of the attack has not yet been disclosed in the sources reviewed.
What Information Was Compromised?
Specific details regarding the types of data compromised have not yet been disclosed in the sources reviewed.
Who Is Responsible?
The identity of the threat actor responsible for the incident has not yet been disclosed in the sources reviewed.
Current Investigation and Response?
South Carolina state officials are actively assisting the city in responding to the cyberattack and addressing the system outages.
What Organizations and Individuals Can Learn?
Government entities should maintain offline backups and robust incident response plans to ensure essential public services can be maintained during digital service outages.
Key takeaways
- The MyColaSC service portal is offline due to a cyberattack.
- State authorities are assisting municipal officials in the recovery efforts.
- The scope of data impact remains under investigation.
Protection recommendations
- Implement multi-factor authentication across all municipal portal access points.
- Regularly test incident response plans to ensure state and local cooperation is seamless.
- Verify the integrity of public-facing web applications to identify unauthorized modifications.
Incident timeline
Oct 22, 2026
First reported by The Record
Sources
This report was drafted with AI from the headline and excerpt of the sources above and has not yet been reviewed by an editor. See our AI disclosure and corrections policy. Based on the headline and excerpt published by The Record.