Interlock Ransomware Group Leaks 43GB of Data in City of St. Paul Cyberattack

St. Paul hit by Interlock ransomware attack, 43GB of sensitive data leaked, city refuses ransom, launches Operation Secure St. Paul with FBI and National Guard.

A major cyberattack on the city of St. Paul, Minnesota, has been claimed by the Interlock ransomware group. The attack, which began on Friday, July 25, 2025, disrupted online payment systems and services at libraries and recreation centres for the city of over 311,000 people.

In response to the incident, Minnesota’s Governor Tim Walz activated the National Guard’s cyber protection unit to help with the recovery (PDF). The city’s mayor, Melvin Carter, acknowledged it was a ransomware attack and made it clear that St. Paul would not pay the ransom.

This stance is a public refusal to negotiate with the attackers. Reportedly, the attack was powerful enough that it even delayed the mayor’s State of the City address.

For your ...