Provides access to Meeting Videos and Agendas
If you have ever watched a Town meeting video or clicked on an agenda, you may have noticed that the link that opens leads to a third-party provider. That provider is Swagit, Inc., a division of Granicus. In late November, Swagit notified the Town that its system was being actively exploited nationwide and that attackers were able to inject unauthorized content, including explicit AI-generated material, into affected government platforms. As a result, had you clicked on a council meeting video, you might have encountered content that did not belong there or, worse, been inadvertently solicited for personal information. Such risks are an increasing reality in today’s digital environment.
The Town acted immediately on November 25 by replacing the Meetings and Agendas page with a workaround that was not entirely dependent on the vendor. However, only the most recent meetings are currently available. The Town’s full archive—approximately fifteen years of meeting history—is not accessible at this time, and there is no indication of when it will return. The Town has stated that the affected portion of the website will remain offline until the vendor confirms that all vulnerabilities have been fully remediated.
Because immediate action was necessary to protect users
In cases like this, the goal of the attacker is typically financial rather than political. By injecting unauthorized links or advertisements into trusted government websites, criminals can generate revenue through advertising clicks, affiliate schemes, search-engine manipulation, or by redirecting users to scam or phishing sites. Government websites carry a high level of public trust and strong search rankings, which makes them especially valuable targets. By exploiting a vendor used by many communities at once, an attacker can scale the impact and increase potential returns without targeting any single town directly.
Town systems not impacted
According to the Town, “The Town can confirm that no Town data, systems, or networks were breached. The incident was isolated to a security vulnerability within a third-party vendor’s platform that hosts our Meetings and Agendas webpage. At no time were Town systems accessed, infected, or impacted.” The affected platform functions as a document library and does not host live records or provide access to Town systems. It hosts public-facing meeting materials and operates separately from Town financial systems, utility systems, public safety networks, and internal databases.
An inconvenience for good reason
While the disruption has been inconvenient, the Town’s response underscores the challenges that come with relying on third-party vendors to provide public access to government records. Although Town systems were not compromised, the outage continues to limit public access to meeting history that residents rely on for transparency and accountability. Restoration of the full archive now depends on the vendor’s remediation efforts, and the Town has indicated that the page will remain offline until the system is confirmed to be secure.
While the disruption has been inconvenient, the Town’s response underscores the challenges that come with relying on third-party vendors to provide public access to government records. Although Town systems were not compromised, the outage continues to limit public access to meeting history that residents rely on for transparency and accountability. Restoration of the full archive now depends on the vendor’s remediation efforts, and the Town has indicated that the page will remain offline until the system is confirmed to be secure.
- - -







