Particle.news

Download on the App Store

Interlock Ransomware Gang Leaks 43GB of St. Paul Data as Recovery Effort Continues

City officials activated the National Guard’s cyber unit alongside federal partners to restore services via mass password resets, forensic analysis, security upgrades.

Image
Image
Image
Interlock Ransomware Group Leaks 43GB of Data in City of St. Paul Cyberattack

Overview

  • Officials have confirmed the Interlock gang’s responsibility after it posted roughly 43 GB of files from a Parks and Recreation network drive.
  • Independent analysts report the leaked archive may contain thousands of HR, administrative and ID documents, though the city’s forensic teams are still verifying the full scope.
  • St. Paul refused to pay the ransom and launched Operation Secure St. Paul to reset credentials for all 3,500 employees, securing over 2,000 devices so far.
  • The Minnesota National Guard’s cyber protection unit joined the FBI and CISA to assist in incident response and system restoration.
  • Key services including library Wi-Fi and online bill payment remain degraded, and the city is offering employees 12 months of free credit monitoring while upgrading security.