Minnesota County Pays Ransom Only to Get Hit Again

Winona County in Minnesota is dealing with the fallout of two separate cyberattacks that hit their systems just months apart. After the initial breach in January 2026, officials decided to pay a ransom of approximately 128,000 dollars to regain control of their data. Insurance covered about 50,000 dollars of that total, while the rest came from public county funds.

Despite the payout, the county was targeted again by a different group of cybercriminals in April. While emergency services remained functional throughout both incidents, some county offices were forced to operate using paper records while digital systems were offline. The first attack compromised sensitive information including Social Security numbers, medical records, and financial data for many residents.

Local authorities are now working closely with the FBI to investigate both incidents. While they have not disclosed the ransom status of the second attack, officials stated they are actively updating their security measures to prevent further disruptions. This situation serves as a clear warning about the risks of paying cybercriminals, as it provides no guarantee against future attacks.