The FBI’s Mock Town for Cyberattack Training

The FBI has established a full-scale mock American town within a secure facility in Alabama. This simulated environment allows agents to train for cyberattacks that could result in significant real-world consequences. The initiative underscores growing concerns about the increasing impact of cyberattacks.

Purpose of the Kinetic Cyber Range

Ransomware incidents have the potential to halt hospital operations, disrupt fuel supplies, and affect public services. To address these challenges, the FBI has developed the Kinetic Cyber Range, a 22,000-square-foot facility located on the FBI’s campus in Huntsville, Alabama. This setup mimics a small American community, complete with homes, businesses, healthcare facilities, and energy infrastructure.

Unlike traditional training environments, the range connects each building to functional networks and operational technology, simulating real-world systems. A data center within the town hosts over 200 physical servers running Windows and Linux systems to resemble corporate IT environments.

Training for Real-World Cyberattacks

The FBI intends to advance cyber training beyond mere classroom exercises, placing agents in realistic, high-pressure situations. Historically, cyber investigators trained using simulated data at computer workstations. With cyberattacks becoming more disruptive, there is a greater emphasis on practical training that captures real incident conditions.

The Kinetic Cyber Range offers various exercises:

• Responding to ransomware attacks
• Handling breaches in corporate networks and gaining system access
• Gathering and analyzing digital evidence in real-world settings
• Making rapid decisions during investigations, including what to seize and the steps to follow

One FBI scenario involves a ransomware attack that cripples hospital systems, demanding technical decisions while considering patient care impacts. Dave Beachboard, the program manager for the cyber range, noted the authenticity of the training experience.

The Surge in Cybercrime

The complex nature of this facility reflects an increasing cyber threat landscape. According to FBI data:

• U.S. cybercrime losses exceeded $20 billion in 2025.
• This marks a 26% rise from the previous year.
• Ransomware is the most reported cyber threat targeting critical infrastructure.

The frequency and severity of attacks have driven law enforcement agencies to focus on immersive training environments.

Inside Training at the Range

Training replicates real investigations as accurately as possible. Agents might:

• Enter a mock home to decide which devices to seize
• Serve search warrants at businesses to analyze live networks
• Extract data from vehicles or servers
• Work in cramped, noisy data centers, reflecting real corporate environments

Beachboard described the intentionally uncomfortable environments, including a data center that is ‘cold, cramped, noisy, dark’ to mimic real conditions.

Support and Privacy Concerns

Since its opening in February 2025, the range has trained over 1,400 students, including FBI personnel and law enforcement partners. The FBI views the town as essential for evolving cyber training, given that digital threats now affect real-world scenarios.

Some critics, including TechCrunch, have raised concerns over the use of tools to extract data from locked or encrypted devices, as these tools exploit hidden vulnerabilities.

The vulnerabilities, kept secret from device makers, could be used by hackers if discovered.

Broader Implications

The FBI’s mock town represents a shift in governmental preparations for cyber threats, addressing them as incidents that could disrupt crucial services and daily life. By simulating a fully operational community in a controlled environment, the FBI aims to better ready investigators for attacks that extend beyond data theft into tangible impacts on society.