Mower County, Minnesota Data Breach

On June 18, 2025, Mower County detected ransomware on its computer network. The County immediately launched an investigation with nationally recognized cybersecurity and data forensics consultants and alerted federal law enforcement. The investigation revealed that unauthorized access occurred between June 11, 2025, and June 18, 2025, during which cybercriminals took County data. After a thorough review completed on November 10, 2025, the County determined that personal information was impacted.

At this time, there is no evidence of misuse of the information involved in this incident. Mower County has secured its network, deployed enhanced security tools, implemented enterprise-wide password resets, and continues to monitor for suspicious activity. The County is offering complimentary identity monitoring services through Experian IdentityWorks, which include credit monitoring, identity restoration, and up to $1 million in identity theft insurance.

Mower County is a county in southeastern Minnesota, with Austin as its county seat and largest city. Established in 1856 and named after John Edward Mower, it is known for its high proportion of cultivable land and is home to a population of around 40,000 residents.

If you received a Data Breach notification letter from Mower County, it confirms that your information was potentially impacted.

What information is involved in the Mower County, Minnesota Data Breach?

Compromised information may include:

Your Personally Identifiable Information (PII) includes details that can identify you, and organizations are legally obligated to safeguard this data. Failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.

A specific category of PII is Protected Health Information (PHI), which pertains to personal medical data. PHI is protected under federal and state regulations. Entities such as healthcare providers and businesses that manage PHI must ensure its security. Just like PII, compromised PHI can be misused by identity thieves, and it’s common for cybercriminals to use both types of information together.

If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.

Residents of California benefit from enhanced privacy rights under the California Consumer Privacy Act (CCPA) and medical privacy protections under the Confidentiality of Medical Information Act (CMIA). These laws grant additional rights and remedies for breaches involving personal and medical data.

If you received a NOTICE OF DATA BREACH letter from Mower County, your personal and financial information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.

Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.