2026 Winona County - April ransomware attack followed by data release
Data compromised
Data released by cybercriminals; specific personal-information categories under review at time of disclosure
Technical writeup
Winona County officials said cybercriminals released information stolen during an April 7, 2026 ransomware attack. The county said it learned of the release on April 29 and was reviewing the data with law enforcement and cybersecurity partners to determine what personal information was compromised. Affected individuals were to be notified after review; no final affected count or data-type list was available in the initial local report.
Root cause
Ransomware attack with subsequent publication of stolen county network data