City of St. Paul, Minnesota

The city of St. Paul, Minnesota, faced a severe cyberattack that forced the shutdown of government networks, including critical systems and digital services. The attack disrupted access to internal systems, online services, and Wi-Fi in public buildings like libraries and recreation centers. Online payment systems were rendered unavailable, and temporary measures were implemented to handle essential services. The attack was described as deliberate and coordinated, carried out by a sophisticated external actor. The Minnesota National Guard was activated to assist in recovery efforts due to the scale and complexity of the incident. While no ransom demand was reported, the attack caused significant disruptions to vital city services.

Source: https://therecord.media/minnesota-governor-activates-national-guard-st-paul-cyber-attack

TPRM report: https://www.rankiteo.com/company/city-of-saint-paul

"id": "cit211080925",
"linkid": "city-of-saint-paul",
"type": "Cyber Attack",
"date": "7/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'customers_affected': '300,000+ residents',
                        'industry': 'Public Sector',
                        'location': 'St. Paul, Minnesota',
                        'name': 'City of St. Paul',
                        'size': 'Large',
                        'type': 'Government'}],
 'customer_advisories': 'Temporary email addresses provided for storm damage '
                        'reports',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Government employee data'},
 'date_detected': '2025-01-01',
 'date_publicly_disclosed': '2025-01-01',
 'description': 'The city of St. Paul, Minnesota, was forced to shut off '
                'government networks in response to a cyberattack, prompting '
                'Gov. Tim Walz to activate the National Guard to assist in '
                'recovery efforts.',
 'impact': {'data_compromised': 'Government employee data',
            'downtime': 'Significant disruptions',
            'operational_impact': '911 operational, other services impacted',
            'systems_affected': 'Government networks, internal systems, online '
                                'services, Wi-Fi access in city buildings'},
 'investigation_status': 'Ongoing',
 'references': [{'source': "Governor Tim Walz's statement"},
                {'source': "Mayor Melvin Carter's press conference"}],
 'response': {'communication_strategy': 'Press conference, public statements',
              'containment_measures': 'Shut off government networks, Wi-Fi '
                                      'access',
              'incident_response_plan_activated': True,
              'third_party_assistance': 'Minnesota Information Technology '
                                        'Services, external cybersecurity '
                                        'vendor, National Guard'},
 'threat_actor': 'Sophisticated external actor',
 'title': 'Cyberattack on St. Paul, Minnesota Government Networks',
 'type': 'Cyberattack'}