United States
USA
Saint Paul network shutdown disrupts municipal online services
Saint Paul detected compromised-account activity on 25 July 2025 and ultimately shut down its broader network on 28 July to contain and remove the attacker. The defensive shutdown temporarily disrupted or delayed internal systems and online municipal services, including library network functions, some billing functions and other public-facing services, while police, fire, 911 and emergency operations remained uninterrupted.
74
Estimated severity
74 / 100
97
Source reliability
97 / 100
Approximate Date
2025-07-25
Targeted Company
CITY OF SAINT PAUL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
Minnesota · United States
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
ERP or business system disruptionService degradationService unavailability
Affected sectors
Government & Public Administration
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Unauthorized access
Attributed threat actors
No information
Sources
Incident Sources
stpaul.govhttps://www.stpaul.gov/departments/emergency-management/cyber-incident-info-hubstpaul.govhttps://www.stpaul.gov/news/important-information-city-services-during-digital-security-incident-1bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/minnesota-activates-national-guard-after-st-paul-cyberattack/amp/