Key Takeaways
- South Dakota has experienced a steady rise in cyber incidents, with over 1,000 reported breaches in the past five years, including 127 in 2026 alone.
- The state rejected roughly $5 million‑plus in federal cybersecurity grants, opting instead to allocate more than $7 million of state funds to its own prevention programs.
- Two state‑run initiatives—SecureSD and Project Boundary Fence—are led by Dakota State University and aim to build a “human firewall” across municipalities, counties, and utility providers.
- Recent high‑profile attacks have targeted Pennington County, Rapid City, Mitchell, Brown County, and Tripp County, illustrating threats from ransom‑seeking criminals and possibly nation‑state actors.
- State leaders continue to augment cybersecurity budgets, such as the $500,000 Future Fund appropriation to the Governor’s Resilience and Infrastructure Task Force, while stressing the need for ongoing vigilance and employee awareness.
Overview of Cyber Threats in South Dakota
South Dakota faces a persistent and growing threat landscape. Over the last five years, the Attorney General’s Consumer Affairs Division logged 1,062 online security breaches, with 127 occurring in 2026. These incidents affect individuals, businesses, and government entities alike, though state law prevents public disclosure of specific victims or locations. The sheer volume of reports underscores that malicious actors—ranging from organized crime groups to potential foreign adversaries—are constantly probing the state’s digital infrastructure.
Federal Funding Declined, State Funds Mobilized
In fiscal year 2023, former Governor Kristi Noem opted not to pursue a portion of a $1 billion federal cybersecurity grant program, citing concerns that the funding was wasteful and would require the state to create a long‑term commitment from one‑time money. As a result, South Dakota forfeited at least $5 million, likely more, in federal assistance. To fill the gap, the legislature approved more than $7 million in state taxpayer dollars for cybersecurity prevention, directing the money toward initiatives such as SecureSD and Project Boundary Fence.
SecureSD: Building a Human Firewall
SecureSD is a voluntary program administered through Dakota State University that assists municipalities, counties, and nonprofit utility providers in strengthening their defenses. Director Mike Waldner emphasizes the importance of cultivating a “human firewall,” noting that every government employee is a potential target and must be trained to recognize phishing, social engineering, and other tactics. The program offers risk assessments, incident‑response planning, and ongoing training sessions designed to embed security awareness into daily operations.
Project Boundary Fence: Protecting Critical Infrastructure
Complementing SecureSD, Project Boundary Fence focuses on safeguarding essential services such as water and sewer systems. By working directly with utility operators, the project helps implement network segmentation, intrusion‑detection tools, and regular vulnerability scans. Waldner notes that many small towns lack dedicated IT staff, making the project’s outreach and technical support vital for preventing disruptions that could threaten public health and safety.
Recent High‑Profile Attacks
Several incidents have highlighted the urgency of these efforts. In Brown County (August 2021), a municipal government suffered its first major cyberattack, prompting statewide concern. More recently, an employee in Tripp County fell for an email phishing scam in October, mistakenly transferring over $826,000 of taxpayer money to a fraudulent account; the funds remain unrecovered as the Division of Criminal Investigation continues a joint probe with federal agencies. In Pennington County and the City of Mitchell, officials suspect Iran‑backed hackers targeted communication systems, while similar intrusions have been reported in Minnesota water systems and possibly a dozen other states.
Rapid City’s Defensive Measures
Rapid City’s technology team demonstrated effective incident response when they contained an attempted hack on a sewage lift‑station monitoring system in late July. IT Director Jim Gilbert credited the city’s built‑in redundancies—automatic alerts to regulators and fail‑over mechanisms—for preventing service disruption and limiting potential damage. Such proactive architecture exemplifies the kind of resilience that SecureSD and Project Boundary Fence aim to replicate across the state.
State‑Level Budget Augmentations
Governor Larry Rhoden reinforced the state’s commitment by allocating $500,000 from the Future Fund to the South Dakota Department of the Military on August 11, 2026. The money bolsters the Governor’s Resilience and Infrastructure Task Force, which lists cybersecurity among its core objectives. This infusion reflects a broader strategy of blending federal‑style preparedness with state‑controlled resources to ensure sustainable, long‑term defense capabilities.
Cultural Shift and Ongoing Challenges
Despite increased funding and programmatic efforts, officials acknowledge that cybersecurity is an ever‑evolving battle. Waldner repeatedly stresses that “we are always under a constant threat, and we are always mitigating something somewhere.” Achieving lasting security requires continuous employee training, regular updates to technical defenses, and a mindset that treats data protection as a shared responsibility rather than an IT‑only issue. The state’s experience illustrates that even with robust programs, vigilance must remain unceasing.
Conclusion: A Model for Rural Cyber Resilience
South Dakota’s decision to eschew federal grants in favor of state‑funded, locally tailored initiatives offers a case study in rural cyber resilience. By concentrating resources on education, infrastructure hardening, and interagency cooperation through SecureSD and Project Boundary Fence, the state seeks to protect its government, industry, and citizens from a threat environment that shows no signs of abating. The ongoing investments, coupled with lessons from recent breaches, will determine whether South Dakota can stay ahead of adversaries in the years ahead.