St. Paul Recovers from Ransomware Attack with No Data Loss

The city of St. Paul experienced a ransomware attack in late July that forced officials to proactively shut down its information systems. Mayor Melvin Carter confirmed the attackers demanded a ransom and threatened to release data, but the city refused to pay, and so far, the FBI-led investigation has found no evidence that any data was stolen. To recover, the city is conducting a large-scale security effort called 'Operation Secure Saint Paul,' involving in-person password resets and security checks for approximately 3,500 city employees. Critical municipal systems, including public safety and payroll, are being restored gradually and securely, though some services like online bill payments and citywide WiFi remain offline. The Minnesota National Guard's cyber team and outside entities are assisting in the ongoing investigation and recovery efforts. Republican lawmakers have requested immediate answers from Mayor Carter regarding the breach as the city works to restore full functionality.