Ransomware attack disrupts city services in Saint Paul, U.S.
On July 25, 2025, the city of Saint Paul, Minnesota, in the U.S. was hit by a ransomware attack that disrupted some city services. The state declared an emergency and deployed the National Guard, and the city moved to reset the passwords of 3,500 employees and restore its online systems. The attackers claimed to have published 43GB of stolen data, and the city's costs from the incident totaled $2.5 million.
Key facts
- Affected organization
- City of Saint Paul
- Incident type
- Ransomware
- Occurred / detected
- 2025-07-25
- Scale of damage
- Disruption of some city services; incident costs of $2.5 million
- Cause / method
- Ransomware attack
- Location
- United States
Timeline
- The city of Saint Paul was hit by a cyberattack that disrupted city services.
- An emergency declaration and the deployment of the Minnesota National Guard were announced.
- The city confirmed it was a ransomware attack and began resetting the passwords of 3,500 employees.
- The attackers claimed to have published 43GB of stolen data online, and the city announced it would begin restoring its online systems.
- The city said it had restored 75% of its systems.
- The costs incurred by the city from the cyberattack totaled $2.5 million.
26 related reports
- Minnesota National Guard assists city of St. Paul after cyberattack
- Minnesota governor activates National Guard amid St. Paul cyberattack
- Minnesota National Guard activated, state of emergency declared after cyberattack against St. Paul
- Some city services still unavailable after St. Paul cyberattack
- Gov. Walz activates Minnesota National Guard to aid St. Paul after cyberattack
- St. Paul, amid cyberattack, warns residents of fraudulent invoices claiming to be city
- Cyberattack targets North St. Paul Police Department, city says
- St. Paul employees reset passwords after ransomware attack
- St. Paul continues to grapple with ransomware attack
- Digital assault that shut down St. Paul services was a ransomware attack, city officials say
- 3500 St. Paul city employees begin password reset process; city confirms cyberattack was ransomware
- Ransomware gang claims attack on St. Paul city government
- St. Paul says cybersecurity breach was a ransomware attack. What does that mean?
- St. Paul to begin restoring online systems this week following cyberattack
- Group behind St. Paul cyberattack alleges posting 43 gigabytes of stolen data online, mayor says
- 美 미네소타주 수도 세인트폴, 랜섬웨어 공격으로 시 데이터 43GB 유출
- Minnesota National Guard cyber team finishes mission helping City of St. Paul after ransomware attack
- Cyber-attacks – What does the law require?
- St. Paul still working on a fix after July 25 cyberattack
- July 2025 Healthcare Data Breach Report
- The latest on the St. Paul cyberattack
- City of St. Paul says ‘75%’ of systems back after summer cyberattack; full cost not shared yet
- St. Paul, Minnesota, fell victim to a cyberattack in July. It’s still recovering.
- Cyberattack cost City of St. Paul $2.5 million
- How St. Paul, Minn., Recovered From a Ransomware Attack
- Saint Paul overcomes ransomware attack with help from Oracle Cloud
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.