On February 9, 2025, the Sault Ste. Marie Tribe of Chippewa Indians faced an unprecedented crisis: a crippling ransomware attack that disrupted multiple aspects of its operations. From administrative services to healthcare facilities, from communications networks to the tribe’s most significant economic driver—the Kewadin Casinos—everything was thrown into chaos. The fallout was immediate and severe.
The Attack and Its Immediate Impact
In the early hours of that Friday morning, tribal officials detected anomalies across their IT systems. Within hours, it became clear: this was no minor glitch. A sophisticated cyberattack had infiltrated the network, encrypting crucial data and locking out essential services. As a precaution, the tribe shut down all affected systems—casinos included—paralyzing operations at all five Kewadin locations in Michigan’s Upper Peninsula (Sault Ste. Marie, St. Ignace, Manistique, Christmas, and Hessel).
The attackers, later identified as the ransomware group RansomHub, claimed to have exfiltrated 119GB of sensitive data—more than 500,000 files—some of which allegedly included private medical records and personal information from various tribal departments. The magnitude of this breach sent shockwaves through the community.
A Community Disrupted: Healthcare and Economic Fallout
Beyond the financial loss incurred by shuttered casinos, the attack had far-reaching consequences. The tribe’s healthcare facilities, vital lifelines for its members, were forced to cancel scheduled appointments. Laboratory testing was severely limited. Patients requiring routine care were left scrambling for alternatives. While emergency services remained operational, the disruption was significant.
Economic ripples extended well beyond tribal borders. Kewadin Casinos not only employ hundreds but also generate revenue that funds numerous social programs. Their abrupt closure meant lost wages, decreased business for local suppliers, and a tourism slowdown that impacted surrounding communities.
A Frantic Response and an Uncertain Timeline
Tribal officials, working alongside cybersecurity experts, immediately launched an investigation. Their priority? Restoring services without further compromising security. While they remained tight-lipped about whether negotiations with the ransomware group took place, it was clear that this was no quick fix.
Chairman Austin Lowes, speaking to the public, acknowledged the gravity of the situation. “This has affected all of us,” he admitted, revealing that even his own personal information had been compromised. The tribe quickly offered free credit monitoring services to those affected, urging vigilance against identity theft.
The communication breakdown exacerbated the crisis. With phone and email systems down, the tribe relied on temporary contact numbers and frequent Facebook updates to relay information—an imperfect, but necessary, stopgap measure.
The Long Road to Reopening
More than two weeks after the attack, the tribe finally announced a phased reopening schedule. Sault Ste. Marie’s Kewadin Casino would be the first to welcome guests again, reopening on February 26 at noon. St. Ignace would follow on February 28, with Manistique, Christmas, and Hessel scheduled to return to full operations on March 3. However, even as doors open, recovery is far from over.
Casino officials have assured the public that heightened cybersecurity protocols are now in place. Whether those measures will be enough to prevent a future breach remains to be seen.
A Wake-Up Call for Tribal Nations
This attack highlights a growing trend: Indigenous governments and enterprises are increasingly being targeted by cybercriminals. The reasons vary—some hackers see tribes as easy targets due to limited cybersecurity resources, while others recognize the economic significance of tribal casinos. Either way, the Sault Ste. Marie Tribe’s experience serves as a cautionary tale.
Going forward, officials plan to implement more robust security measures, conduct comprehensive system audits, and increase cybersecurity training for staff. “This was a hard lesson,” admitted a tribal spokesperson, “but one we won’t forget.”
Moving Forward
For now, the focus is on stability—restoring trust with employees, patrons, and community members. The attack may have shaken the foundation of the tribe’s operations, but resilience is woven into their history. And as the slot machines hum back to life and the blackjack tables see their first hands dealt post-crisis, one thing is clear: the Sault Ste. Marie Tribe is determined to come back stronger than before.
