City of Cedar Falls data breach
Incident readout
- Company
- City of Cedar Falls
- Reported to
- Indiana Attorney General
- Filed
- February 19, 2025
- People affected
- Not stated in the filing
- Incident type in filing
- Not stated
- Our review
- Investigation Open
Was this a ransomware attack?
The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.
What we know
The City of Cedar Falls is a municipal government entity responsible for providing essential public services and managing administrative records for its residents. As a local government body, the City typically collects and stores sensitive personal information, including tax records, utility account details, employment files, and public safety documentation. In 2025, the City of Cedar Falls officially reported a data security incident to the Indiana Attorney General involving the unauthorized access of its internal systems. If you have received a formal data breach notification letter from the City, it indicates that your personal information may have been compromised during this event. This notice is intended to inform you of the nature of the incident and the steps the City is taking to address the security of your data.
See every breach reported in Indiana or read what to do after a ransomware attack.
Other breaches reported in Indiana
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.