New York City Mayor Eric Adams' administration has limited access to the employee payroll website after scammers targeted employees' text-message inboxes.
State officials determined that no data was compromised during a phishing attack that hit three state agencies on Wednesday, including the bureau that oversees elections.
A hacker has been building phony versions of websites including those of San Mateo, California; Tampa, Florida; North Las Vegas; and Dallas County, Texas.
Damage was minimal, but the attacks underscore a repeated call from the governor for increased cybersecurity awareness and training throughout the state.
The state's IT commissioner warns that more comprehensive protections are needed as attackers grow "more sophisticated, more skilled, more organized, and more professional."