RansomwareLawGroup.com

> Cause not stated in filing

City of McMinnville data breach investigation

The City of McMinnville in Indiana reported a cybersecurity incident, confirming the exposure of sensitive personal and financial data. This breach places local residents and current and former city employees at an elevated risk of identity theft, financial fraud, and other malicious activities. Our firm is investigating the city's data security protocols to determine if legal action is warranted.

Filed
September 29, 2026
Regulator
Indiana AG
People affected
Not stated
File status
Monitoring

What the filing confirms

  • City of McMinnville reported the incident to the Indiana Attorney General.
  • Information involved: Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Financial Account Number, Wage and Compensation Information, Tax Return Information.

Still unknown

  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Read the filing at the source

Investigation notes

The City of McMinnville in Indiana officially reported a cybersecurity incident on September 29, 2026, confirming that sensitive personal data entrusted to the municipality was exposed. As a local government entity, the City of McMinnville manages vital public services and records, necessitating the collection and retention of extensive citizen and employee information.

The incident compromised a substantial array of personal identifiers and financial details. The exposed data includes Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Financial Account Number, Wage and Compensation Information, and Tax Return Information. This combination of data types presents a high risk for identity theft, financial fraud, and other malicious activities.

When such sensitive data is exposed, individuals face enduring risks, including unauthorized account access, fraudulent tax filings, and identity usurpation. Municipalities like the City of McMinnville are legally obligated to implement robust security measures to protect the private information they collect. Our investigation will examine whether the city maintained adequate safeguards against foreseeable cyber threats, and if the notification to affected individuals was timely.

If you received a data breach notification from the City of McMinnville, it is crucial to remain vigilant. We recommend immediately reviewing all financial statements and credit reports for any suspicious activity. Consider placing a fraud alert or credit freeze on your credit files to prevent unauthorized accounts from being opened in your name.

The receipt of an official breach notice establishes grounds to assess potential legal claims against the City of McMinnville. Individuals whose data was exposed may be eligible to pursue compensation for damages, including potential future identity theft losses and the cost of credit monitoring. Our firm is evaluating these claims to help affected individuals understand their legal options.

If your data was compromised in this incident, we encourage you to contact our firm for a free, confidential case evaluation. Our team can help you understand your rights and determine if you have a valid claim. We operate on a contingency fee basis, meaning you pay nothing unless we secure a recovery for you.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether City of McMinnville used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Indiana.

Other open files in Indiana

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.