Loading story…
Washburn County, Wisconsin disclosed that it is responding to a cybersecurity incident after detecting suspicious activity on the morning of August 6. County officials said they immediately activated incident response procedures, engaged external cybersecurity professionals and other partners, and began investigating the scope of the intrusion while working to restore affected technology services safely.
Reporting on the incident said county systems were shut down following the attack, while the county's public notice stated the investigation was still ongoing and officials had not yet determined the exact nature of the attack, which systems were compromised, or who was responsible. The event has been presented as an active local government cyber incident, with service disruption and forensic review continuing as authorities assess potential impact.
See attribution, scope, and your downstream exposure.
2 events from the most recent confirmed update back to the earliest known activity.
Washburn County published an official notice on August 6, 2026 stating that it was responding to a cybersecurity incident. At the time of the notice, the investigation was ongoing and the county said it had not yet determined the exact nature of the attack, affected systems, or responsible actor.
On the morning of August 6, 2026, Washburn County detected suspicious activity and immediately activated its incident response procedures. The county also took measures to protect its systems and data and engaged cybersecurity professionals and other partners to investigate, assess impact, and restore affected services.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
cyberveille.ch
Open sourceco.washburn.wi.us
Open sourcedysruptionhub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Kaufman County, Texas, experienced two separate cybersecurity incidents in October, with the most recent attack confirmed on October 20. County officials acknowledged that personal information, including names and Social Security numbers, may have been accessed during the earlier breach, prompting notifications to affected residents and the offer of complimentary identity protection services. While there is no evidence of misuse of the compromised data, concerns have been raised about the adequacy of the county's cybersecurity measures following these repeated incidents. The latest cyber intrusion resulted in the shutdown of various county systems, including courthouse computers, though emergency services and the Sheriff's Office remained operational. These attacks on Kaufman County occurred alongside other cyber incidents affecting government services in Tennessee and Indiana, highlighting a broader trend of increased cyber threats to local governments amid reduced cybersecurity resources and support at the federal level.
Jun 29, 2026
Leduc County experienced a deliberate ransomware attack on December 25, which disabled several of the county’s information technology systems. The incident led to the proactive shutdown of additional IT services as a precaution during an ongoing forensic investigation. Key stakeholders, including the RCMP, insurance, and banking providers, were notified, and affected services included the county’s email platform, safety codes permits, development permits online portal, and website form submissions. Authorities responded quickly to the incident, with the RCMP receiving a report on Christmas Day. County officials stated that the attack was detected early, allowing for rapid engagement of cybersecurity experts and containment measures. Preliminary findings suggest minimal information was compromised, and the county is working to restore normal operations, though no timeline has been provided. Updates will be communicated to residents and stakeholders as the investigation progresses. No threat actor has claimed responsibility for the attack at this time.
Jul 12, 2026
Minnesota Governor Tim Walz issued an emergency executive order authorizing the Minnesota National Guard to help Winona County respond to a cyberattack that disrupted the county’s **critical systems** and digital services. County officials discovered the incident on Monday and said the attack significantly impaired delivery of emergency and municipal services, with some police department phone transfer functions reportedly unavailable. The county has been coordinating with the **FBI**, the Minnesota Bureau of Criminal Apprehension, the state IT agency, a cybersecurity vendor, and the League of Minnesota Cities. State officials said the scale and complexity of the intrusion exceeded the county’s internal and contracted response capabilities, prompting emergency state support. The incident marks the second successful cyberattack reported against Winona County in the same year, following an earlier breach that knocked out systems used for real-estate transactions and police file access before service was restored.
Jun 29, 2026