Overview
- The breach was detected on July 25, prompting the city to take municipal networks offline and disrupt public library Wi-Fi and online payment systems.
- Interlock claimed responsibility, saying it leaked 43 GB of data largely drawn from a shared Parks and Recreation drive containing work documents and personal files.
- City leaders refused the ransom demand and enlisted FBI, National Guard cyber and CISA teams for forensic analysis and breach containment.
- Operation Secure St. Paul has inspected devices and reset passwords for about 3,500 employees, with over 2,000 completions reported by Aug. 11.
- All city employees are being offered 12 months of free credit monitoring and identity theft protection as officials continue to probe potential exposure of resident data.