City of Iowa City data breach
Incident readout
- Company
- City of Iowa City
- Reported to
- Iowa Attorney General
- Filed
- May 11, 2026
- People affected
- Not stated in the filing
- Incident type in filing
- Not stated
- Our review
- Investigation Open
Was this a ransomware attack?
The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.
What we know
The City of Iowa City is a municipal government entity responsible for providing public services, managing infrastructure, and maintaining administrative records for its residents. As a local government body, the City typically collects and stores sensitive personal information, including names, addresses, Social Security numbers, and financial data related to utility payments, tax records, and employee payroll. This data breach was officially reported to the Iowa Attorney General in 2026, confirming that unauthorized access to these systems occurred. If you have received a formal data breach notification letter, it indicates that your personal information was likely contained within the files accessed during this incident. We recommend reviewing the letter carefully to understand the specific scope of the exposure and the protective measures being offered.
See every breach reported in Iowa or read what to do after a ransomware attack.
Other breaches reported in Iowa
- Northwest Iowa Community CollegeIowa Attorney General · Filed July 8, 2026Count not stated
- Karl Auto GroupIowa Attorney General · Filed June 2, 2026Count not stated
- Karl Auto GroupIA Attorney General · Filed June 2, 2026Count not stated
- KerberRose S.C. (Natural Beauty Growers, LLC)Iowa Attorney General · Filed May 29, 2026Count not stated
- KerberRose S.C. (Natural Beauty Growers, LLC)IA Attorney General · Filed May 29, 2026Count not stated
- City of Iowa CityIA Attorney General · Filed May 11, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.