Particle.news

Download on the App Store

St. Paul Ransomware Recovery Accelerates After Hackers Post 43 GB of City Data

St. Paul declined to pay Interlock’s ransom demand after attackers published files from a Parks and Recreation network drive.

Overview

  • The breach was detected on July 25, prompting the city to take municipal networks offline and disrupt public library Wi-Fi and online payment systems.
  • Interlock claimed responsibility, saying it leaked 43 GB of data largely drawn from a shared Parks and Recreation drive containing work documents and personal files.
  • City leaders refused the ransom demand and enlisted FBI, National Guard cyber and CISA teams for forensic analysis and breach containment.
  • Operation Secure St. Paul has inspected devices and reset passwords for about 3,500 employees, with over 2,000 completions reported by Aug. 11.
  • All city employees are being offered 12 months of free credit monitoring and identity theft protection as officials continue to probe potential exposure of resident data.