City of McMinnville data breach
The City of McMinnville, Vermont, reported a data breach on September 29, 2026, which exposed sensitive personal information belonging to its residents. Those who received a notification letter should understand the types of data compromised and the immediate actions necessary to protect their identity and financial accounts.
Incident readout
- Company
- City of McMinnville
- Reported to
- Vermont Attorney General
- Filed
- September 29, 2026
- People affected
- Not stated in the filing
- Incident type in filing
- Not stated
- Our review
- Monitoring
Was this a ransomware attack?
The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Government ID Number
- Banking and Payment Information
- Residential Address History
- Property Tax and Assessment Records
- Utility Account Details
What we know
The City of McMinnville, Vermont, recently disclosed a cybersecurity incident to the Vermont Attorney General, confirming an unauthorized intrusion into its digital systems. This breach, reported on September 29, 2026, highlights the significant risks associated with the vast amounts of personal data collected and stored by municipal governments. While the specific nature of the cyberattack remains undisclosed, the incident has prompted concerns for the residents whose information was compromised.
The compromised data in this City of McMinnville breach includes Full Name, Social Security Number, Date of Birth, Government ID Number, Banking and Payment Information, Residential Address History, Property Tax and Assessment Records, and Utility Account Details. Such a comprehensive exposure of personal data creates a significant risk for those affected. This specific combination of identifiers can be used to facilitate various forms of financial fraud and identity theft.
With data like Social Security Numbers and Dates of Birth exposed, individuals face a heightened risk of sophisticated identity fraud, including the creation of synthetic identities or the filing of false tax returns. The compromise of Banking and Payment Information further exposes residents to direct financial account takeover, unauthorized transactions, and fraudulent withdrawals. These types of incidents can lead to substantial financial distress and require extensive effort to resolve.
As a public entity, the City of McMinnville has a fundamental responsibility to safeguard the sensitive information entrusted to it by its citizens. Vermont statutes and common law require municipalities to implement robust security measures to prevent unauthorized access and protect data integrity. A breach of this magnitude suggests that these crucial safeguards may have been insufficient, leaving constituent data vulnerable to malicious actors.
If you have received a data breach notification letter from the City of McMinnville, it signifies that your personal information was directly involved in this security incident. Understanding your rights and the potential implications is crucial. Our firm is actively investigating this City of McMinnville data breach and offers a free, no-obligation case review to help affected residents understand their options and the steps they can take to protect themselves.
See every breach reported in Vermont or read what to do after a ransomware attack.
Other breaches reported in Vermont
- Ford Audio-Video Systems, LLCVermont Attorney General · Filed October 23, 2026Count not stated
- EyeMed Vision Care, LLCVermont Attorney General · Filed October 23, 2026Count not stated
- Stitch Connect Inc.Vermont Attorney General · Filed October 23, 2026Count not stated
- Alabama Fire CollegeVermont Attorney General · Filed October 23, 2026Count not stated
- Summit School DistrictVermont Attorney General · Filed October 22, 2026Count not stated
- Ancestral MedicineVermont Attorney General · Filed October 22, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.