RansomwareLawGroup.com

> Cause not stated in filing

City of McMinnville data breach investigation

The City of McMinnville reported a data incident to the Texas Attorney General on October 2, 2026. This breach may have exposed sensitive personal information like Social Security Number and Direct Deposit Account Details, potentially putting residents and employees at risk of identity theft and financial fraud. Affected individuals should understand their rights and potential legal options.

Filed
October 2, 2026
Regulator
Texas AG
People affected
Not stated
File status
Monitoring

What the filing confirms

  • City of McMinnville reported the incident to the Texas Attorney General.
  • Information involved: Full Name, Social Security Number, Date of Birth, Residential Address, Municipal Utility Account Information, Property and Tax Assessment Records, Wage and Payroll Information, Direct Deposit Account Details, Driver's License or Government ID Number.

Still unknown

  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Read the filing at the source

Investigation notes

On October 2, 2026, the City of McMinnville in Texas filed a formal notification with the state's Attorney General regarding a cybersecurity incident that began on or about June 1, 2026. This official report confirms that personal information held by the municipality may have been accessed without authorization. Our firm is currently monitoring this developing situation as an open investigation into the City of McMinnville's data security practices and the timeline of this incident.

The City of McMinnville's filing indicates that a range of highly sensitive personal data was potentially exposed during this incident. This includes Full Name, Social Security Number, Date of Birth, Residential Address, Municipal Utility Account Information, Property and Tax Assessment Records, Wage and Payroll Information, Direct Deposit Account Details, and Driver's License or Government ID Number. The compromise of such foundational data elements can carry significant risks for identity theft, financial fraud, and targeted scams for affected residents and employees.

As a municipal government, the City of McMinnville acts as a custodian for vast amounts of sensitive civic and personal data, ranging from utility billing to employee payroll. The occurrence of an incident involving such a broad spectrum of information raises questions regarding the security measures in place to protect resident and employee data. Our investigation will examine whether appropriate safeguards were maintained, how long unauthorized access persisted, and if notice to affected individuals was provided in a timely manner under Texas law.

If you have received a data breach notification letter from the City of McMinnville, it signifies that your personal information was part of this confirmed incident. This notification provides you with legal standing to understand your options, including potentially participating in a class action lawsuit to seek accountability for the company's conduct and recover damages. Our firm offers a free, confidential case review to help you assess your situation without any obligation. We work on a contingency fee basis, meaning you pay nothing out-of-pocket unless we successfully recover compensation on your behalf.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether City of McMinnville used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Texas.

Other open files in Texas

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.