Mower County, Minnesota Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (December 4, 2025) – Federman & Sherwood, a national law firm focused on data breach and privacy litigation, is investigating a significant cybersecurity incident involving Mower County, Minnesota, following the County’s recent filing with the Attorney General of Maine.
According to the filing, Mower County detected a ransomware attack on its computer network on June 18, 2025. A forensic investigation later confirmed that unauthorized access took place between June 11 and June 18, 2025, during which cybercriminals removed County data. After completing a detailed review on November 10, 2025, the County determined that personal information belonging to certain individuals—including Maine residents—was impacted.
The consumer notice indicates that the compromised data included individuals’ names along with additional personal information contained within County systems, depending on the individual. Although the County reports that it has no evidence of misuse, it is notifying affected individuals out of caution and transparency.
Following discovery of the incident, Mower County secured its network, engaged nationally recognized cybersecurity and forensics specialists, notified federal law enforcement, deployed enhanced security tools, increased endpoint monitoring, and conducted a County-wide password reset to help prevent similar future events.
The County is offering affected individuals complimentary Experian IdentityWorks identity monitoring services for a designated period noted in each notice. These services include access to credit reports, ongoing credit monitoring, identity restoration assistance, and up to $1 million in identity theft insurance. Detailed enrollment instructions and additional identity protection resources were included with the consumer notice.
Mower County advises individuals to remain vigilant by monitoring account statements, reviewing credit reports, and considering additional protective steps such as fraud alerts or security freezes. Guidance and credit bureau contact information were also provided within the notice materials.
Federman & Sherwood is investigating whether Mower County maintained appropriate cybersecurity safeguards, whether the ransomware attack could have been prevented, and what legal rights may be available to affected Maine residents and others.
The compromised information may have included:
- Full name
- Social Security number
- Other sensitive information
What is Mower County, Minnesota?
Mower County is not a company but a local government entity in Minnesota that provides public services, such as public safety, environmental services, and human services. It operates departments that handle property taxes, vital records, licenses, and legal matters, and it also offers services like recycling and veteran support.
If you were impacted by this breach, you may contact Federman & Sherwood at 1-800-237-1277 or click the link to complete the Data Breach Questionnaire and someone will reach out to you shortly.