> Cause not stated in filing
City of McMinnville data breach investigation
The City of McMinnville in Indiana reported a cybersecurity incident, confirming the exposure of sensitive personal and financial data. This breach places local residents and current and former city employees at an elevated risk of identity theft, financial fraud, and other malicious activities. Our firm is investigating the city's data security protocols to determine if legal action is warranted.
- Filed
- September 29, 2026
- Regulator
- Indiana AG
- People affected
- Not stated
- File status
- Monitoring
What the filing confirms
- City of McMinnville reported the incident to the Indiana Attorney General.
- Information involved: Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Financial Account Number, Wage and Compensation Information, Tax Return Information.
Still unknown
- How many people were affected. The filing does not give a number.
- What caused the incident beyond the description in the filing.
- How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Investigation notes
The City of McMinnville in Indiana officially reported a cybersecurity incident on September 29, 2026, confirming that sensitive personal data entrusted to the municipality was exposed. As a local government entity, the City of McMinnville manages vital public services and records, necessitating the collection and retention of extensive citizen and employee information.
The incident compromised a substantial array of personal identifiers and financial details. The exposed data includes Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Financial Account Number, Wage and Compensation Information, and Tax Return Information. This combination of data types presents a high risk for identity theft, financial fraud, and other malicious activities.
When such sensitive data is exposed, individuals face enduring risks, including unauthorized account access, fraudulent tax filings, and identity usurpation. Municipalities like the City of McMinnville are legally obligated to implement robust security measures to protect the private information they collect. Our investigation will examine whether the city maintained adequate safeguards against foreseeable cyber threats, and if the notification to affected individuals was timely.
If you received a data breach notification from the City of McMinnville, it is crucial to remain vigilant. We recommend immediately reviewing all financial statements and credit reports for any suspicious activity. Consider placing a fraud alert or credit freeze on your credit files to prevent unauthorized accounts from being opened in your name.
The receipt of an official breach notice establishes grounds to assess potential legal claims against the City of McMinnville. Individuals whose data was exposed may be eligible to pursue compensation for damages, including potential future identity theft losses and the cost of credit monitoring. Our firm is evaluating these claims to help affected individuals understand their legal options.
If your data was compromised in this incident, we encourage you to contact our firm for a free, confidential case evaluation. Our team can help you understand your rights and determine if you have a valid claim. We operate on a contingency fee basis, meaning you pay nothing unless we secure a recovery for you.
What our attorneys examine
A cyberattack does not excuse a company from protecting the information it holds. We look at whether City of McMinnville used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Indiana.
Other open files in Indiana
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.