Overview
- Officials have confirmed the Interlock gang’s responsibility after it posted roughly 43 GB of files from a Parks and Recreation network drive.
- Independent analysts report the leaked archive may contain thousands of HR, administrative and ID documents, though the city’s forensic teams are still verifying the full scope.
- St. Paul refused to pay the ransom and launched Operation Secure St. Paul to reset credentials for all 3,500 employees, securing over 2,000 devices so far.
- The Minnesota National Guard’s cyber protection unit joined the FBI and CISA to assist in incident response and system restoration.
- Key services including library Wi-Fi and online bill payment remain degraded, and the city is offering employees 12 months of free credit monitoring while upgrading security.