Key Takeaways
- Maryland’s online Real Property Search tool was taken offline on April 14, 2026 after suspicious activity was detected on its servers.
- The Maryland Department of Information Technology (DoIT) and the Department of Assessments and Taxation confirmed that only publicly available property data was present on the compromised systems; no private information appears to have been accessed or exfiltrated.
- The website will remain down until the investigation concludes and the system is cleared for public use, with officials urging residents to avoid third‑party sites and to follow basic cybersecurity hygiene.
- Residents can obtain property records in person or via phone/email from local Real Property Assessment County Offices (e.g., Washington County: 3 Public Square, Hagerstown; Wicomico County: 201 Baptist Street, Salisbury).
- State officials shared cybersecurity best practices: keep software updated, recognize phishing, use endpoint protection, employ strong unique passwords, and enable multi‑factor authentication.
Overview of the Incident
On Tuesday, April 14, 2026, the Maryland Department of Information Technology’s Office of Security Management identified anomalous activity on the servers that host the state’s Real Property Search web application. Acting swiftly, officials took the website offline to contain any potential threats and launched a formal investigation. The action was announced in a news release issued by the Maryland Department of Assessments and Taxation on Saturday, April 18, 2026, which detailed the steps already taken and reassured the public that the disruption was precautionary.
Timeline of Events
The suspicious activity was first noticed on April 14, prompting an immediate shutdown of the online search tool. The system remained inaccessible through the weekend and was still down on Monday, April 20, 2026, when the Herald‑Mail received an update from DoIT spokesperson Nathan Miller. No further developments were reported late that morning, and the department indicated that the outage would continue until the investigation concluded and the platform was verified as secure.
Investigation Findings
DoIT’s Office of Security Management conducted a forensic analysis of the compromised servers. Their preliminary assessment, shared in the April 18 release and reiterated in Miller’s April 20 email, concluded that all affected systems contained only information already publicly accessible through the Real Property Search application. Specifically, the data included property ownership details by address, sale prices, and recent transaction histories—none of which qualifies as sensitive or confidential personal data. Investigators have not uncovered evidence of private data being accessed, copied, or exfiltrated.
Data Exposed and Risk Assessment
Because the compromised systems held only public property records, the state does not anticipate a broader cybersecurity risk to Maryland residents or government infrastructure at this time. The investigation remains ongoing, but officials have emphasized that the breach did not expose Social Security numbers, financial account information, or other personally identifiable data that could be used for identity theft or fraud. Consequently, the primary concern is the temporary loss of convenient online access rather than a data‑privacy crisis.
State Response and Reassurance
Maryland officials have moved quickly to mitigate any potential fallout. In addition to taking the website offline, DoIT is working with state, federal, and third‑party partners to strengthen and harden the online systems that the public relies on. The department reiterated its commitment to continuous monitoring, patch management, and collaboration with cybersecurity experts to prevent similar incidents. Public statements have stressed that there is no evidence of a wider threat landscape affecting other state services.
Current Status and Restoration Plan
As of the latest update on April 20, 2026, the Real Property Search web application remains offline. DoIT spokesperson Nathan Miller confirmed that the site will be restored only after the investigation is finished and security teams have validated that the system is free of vulnerabilities. No specific timetable for restoration has been provided, but the agency pledged to communicate any progress promptly through official channels.
Alternative Access and Contact Information
While the online tool is unavailable, residents who need property records can visit their local Real Property Assessment County Office in person or contact the office by phone, fax, or email. For Washington County, the office is located at 3 Public Square, downtown Hagerstown; phone 301‑791‑3050, fax 301‑791‑2925, email [email protected]. Wicomico County residents may go to the Salisbury District Court Multi‑Service Center at 201 Baptist Street; phone 410‑713‑3560, fax 410‑713‑3570, email [email protected]. Both offices operate weekdays from 8 a.m. to 4:30 p.m.
Cybersecurity Advice for Residents
State officials urged Marylanders to adopt basic cybersecurity precautions while awaiting the restoration of the online service. Recommendations include: keeping all device software up to date to receive the latest security patches; learning to recognize phishing attempts—such as deceptive emails, texts, or websites that mimic legitimate institutions—and avoiding clicks on suspicious links or entry of personal data; installing reputable endpoint protection software with automatic updates and real‑time scanning, and performing regular scans; using unique, complex passwords for each account and considering a password manager to manage them; and enabling multi‑factor authentication wherever possible to add an extra layer of security. The FBI’s guidance on scrutinizing email sender addresses and URL spelling variations was also highlighted as a useful tactic to spot spoofed communications.
Continued Vigilance and Closing Remarks
Maryland’s handling of the Real Property Search outage demonstrates a proactive approach to cybersecurity incidents: rapid containment, transparent communication, and clear guidance for the public. Although the disruption has inconvenienced users who rely on the online tool for property inquiries, the state’s assurance that no private data was compromised helps alleviate fears of identity theft or fraud. Residents are encouraged to utilize the designated county offices for their needs, remain alert to phishing and scam attempts, and follow the outlined best practices to protect their personal information. As the investigation continues, officials will keep the community informed and work toward restoring a secure, reliable online property search platform in the near future.