What happened
Minnesota deployed members of the National Guard to help respond after a cyberattack disrupted local government systems in Mower County. State officials said the incident affected county technology operations and prompted a broader emergency response involving state resources. Gov. Tim Walz authorized the cyber protection support after county officials requested assistance. The Minnesota National Guard said its cyber forces were sent to help assess the impact, support recovery, and work alongside local and state authorities responding to the incident. The report says the attack affected county services and technology infrastructure, though officials did not publicly describe the specific intrusion method or identify the responsible actors.
Who is affected
The direct impact falls on Mower County, its government systems, and the local services that rely on those systems. The response also involves Minnesota state authorities and the Minnesota National Guard, which was activated to support incident assessment and recovery.
Why CISOs should care
This incident matters because it shows that a local government cyberattack can escalate quickly into a state-supported emergency response when county systems are sufficiently disrupted. It also highlights the value of having formal paths to request outside cyber assistance when in-house and local resources are not enough to manage response and recovery alone.
3 practical actions
- Define escalation paths before a crisis: Make sure local and regional entities know when and how to request state or National Guard cyber support if an attack overwhelms internal capacity.
- Plan for continuity during county-level disruption: Ensure public services can continue or degrade safely when local government systems become unavailable.
- Coordinate multi-agency cyber response early: Build incident response plans that include local leaders, state agencies, and external cyber responders from the outset when public-sector systems are hit.
For more news about disruptive intrusions affecting government operations, click Cyberattack to read more.