St. Paul experiences a significant cyberattack, leading to Minnesota's activation of the National Guard for response measures.
St. Paul, Minnesota, is currently grappling with a sophisticated digital attack on its information infrastructure. The city's Mayor, Melvin Carter, has emphasised that this was not a technical glitch but a serious crime involving a "sophisticated external actor." As of the latest reports, the specific party or group responsible for the attack has not been publicly identified, and the investigation is ongoing[1][2][3].
The attack was detected in the computer networks of St. Paul, and it was intentionally caused by a 'criminal, external threat actor'. The scale and complexity of the attack have exceeded both internal and commercial response capabilities, highlighting the severity of the incident[1][2].
In response, Governor Tim Walz activated the Minnesota National Guard’s cyber protection forces to assist with the response, underlining the urgency of the situation[1][2]. The city is also working with two national private cybersecurity firms to analyse the breach and help restore systems. No ransom demand or motive has been publicly disclosed so far, and city officials have refrained from speculating about who might be behind the attack or their objectives[2].
The US government has warned about Medusa ransomware targeting critical infrastructure. While it's not yet clear if this was a ransomware attack on St. Paul, the city has experienced 'back-end' challenges. However, 911 services in St. Paul are operating normally[1][2].
The attack on St. Paul's computer networks is part of a recent increase in attacks on US critical infrastructure. Critical infrastructure is a top target for cybercriminals, who leverage the importance of the services they provide and the sensitive data they hold to request higher ransoms[4].
The investigation is being led by the FBI along with local, state, and federal agencies working collaboratively to determine how the attackers accessed the systems and to contain the damage[1][2][3]. This information reflects the current status based on reports up to July 30, 2025[1][2][3].
[1] St. Paul Pioneer Press. (2025). St. Paul cyberattack: What we know so far about the digital assault on St. Paul's computer networks. [online] Available at: https://www.twincities.com/2025/07/30/st-paul-cyberattack-what-we-know-so-far-about-the-digital-assault-on-st-pauls-computer-networks/
[2] Star Tribune. (2025). St. Paul cyberattack: What we know about the digital assault on St. Paul's computer networks. [online] Available at: https://www.startribune.com/st-paul-cyberattack-what-we-know-about-the-digital-assault-on-st-pauls-computer-networks/
[3] KARE 11. (2025). St. Paul cyberattack: What we know about the digital assault on St. Paul's computer networks. [online] Available at: https://www.kare11.com/news/local-news/st-paul-cyberattack-what-we-know-about-the-digital-assault-on-st-pauls-computer-networks/
[4] Cybersecurity and Infrastructure Security Agency. (2025). Ransomware Preparedness Playbook for Critical Infrastructure Owners and Operators. [online] Available at: https://www.cisa.gov/publication/ransomware-preparedness-playbook-critical-infrastructure-owners-and-operators
The cyberattack on St. Paul's computer networks, a sophisticated digital attack, underscores the importance of strong cybersecurity measures in the face of advancing technology. The city's response, which includes activating the Minnesota National Guard’s cyber protection forces and collaborating with private cybersecurity firms, demonstrates the growing role of technology in our society's defense against cybercrime.
