Winona County Pays $128K Ransom After Two Cyberattacks

Winona County, Minnesota, confirmed that it paid a ransom of $128,539.57 following a ransomware attack that began on January 22, 2026. The initial attack disrupted several county computer networks and delayed municipal services. A second, unrelated ransomware incident occurred on April 7, 2026, further impairing the county's ability to deliver essential services. The county is currently reviewing the data compromised in the April attack and plans to notify affected individuals. They will also offer credit monitoring services for those whose sensitive information was accessed. County officials are implementing upgrades to their digital infrastructure to enhance security. The decision to pay the ransom was made in consultation with their insurance carrier to protect residents' data and services.

Key Points: • Winona County paid $128,539.57 to recover from a ransomware attack in January 2026. • A second ransomware incident occurred in April 2026, unrelated to the first attack. • The county is offering credit monitoring to individuals affected by the April breach.