Ransomware attack disrupting Michigan's Sault Tribe operations

A recent ransomware attack on the Sault Tribe in Michigan has knocked many of its most critical services offline. 

In a statement on Monday, Sault Tribe Chairman Austin Lowes said the incident began on Sunday morning and impacted “multiple computer and phone systems across tribal administration, including the casinos, health centers and various businesses.”

“In response, the tribe has had to temporarily close many departments and businesses,” Lowes said. 

“Our hope is that this issue gets resolved within a week, but we are prepared for it to last longer… We understand the disruption this is causing to many members’ and employees’ lives and are working diligently to resolve this issue as quickly as possible.”

The federally-recognized Native American tribe, officially known as the Sault Ste. Marie Tribe of Chippewa Indians, has a population of more than 44,000 and resides in Michigan's Upper Peninsula. 

It is the largest federally-recognized tribe in Michigan and has been able to pay for many of its community resources through its ownership of the Kewadin Casinos.

On Tuesday, Lowes provided an update on the tribal Facebook page, warning that the attack has had a devastating impact on the tribe’s health division. 

“A Sault Tribe data security incident has impacted Sault Tribe Health Division’s ability to provide comprehensive medical services,” Lowes said.

All scheduled appointments at the medical office for primary care services, radiology office and the Dental Department have been cancelled but they are still accepting emergency walk-ins. 

For any walk-in appointments, patients are asked to bring a list of all current non-prescribed medications and all prescription bottles. Lab services are currently limited, according to Lowes. An information booth at the medical center has been set up for those with questions.

At the five Kewadin Casinos locations, the tribe said “all gaming operations were halted until further notice.”

The casino Facebook page also confirms that hotels are still open for current guests but check-in is not available. 

Lowes declined  to provide more information about the incident due to the ongoing investigation into the attack. He said the tribal government would remain open in “a limited capacity to serve our members to the best of our ability despite this incident.”

Elder services — which include meal programs, transportation and home health aide visits — are still fully operational but many other services are only available in person or are not connected to technological systems. 

Licenses for fishing and hunting cannot be processed and the local Big Bear Arena can only accept cash payments. Gas is not available, and stores are operating on a cash-only basis for purchases. The tribal government, meanwhile, has had to cancel multiple meetings scheduled for this week. 

Michigan governments continue to face a barrage of ransomware attacks after multiple incidents in 2024 impacted Wayne County, the city of Flint and Traverse City.