Winona County
ent_c470ca25c6bad917
Disclosures
6
State AG · Leak Site · 6 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
6,196
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Winona County
- Normalized
- winona county— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- winonacounty.gov
Disclosure history (6)newest first
- Massachusetts State AGas victim2026-05-18
Winona County notified Massachusetts residents of a January 2026 ransomware attack involving personal information. The County is cooperating with federal law enforcement, has strengthened network security, and is offering 24 months of credit monitoring through IDX. An investigation into a separate April 2026 incident is ongoing.
- New Hampshire State AGas victim2026-05-18
Winona County, Minnesota, notified the New Hampshire Attorney General of a ransomware incident. Unauthorized access occurred between January 18 and January 22, 2026. The attack resulted in the exfiltration of names and Social Security numbers of one New Hampshire resident. The County detected the ransomware on January 22, 2026, engaged forensic consultants, notified the FBI, and restored its network. Notification to the affected individual was sent on May 12, 2026.
- Nebraska State AGas victim2026-05-12
Winona County experienced a ransomware attack in January 2026. Unauthorized access occurred between Jan 18-22, 2026, resulting in data exfiltration and encryption. The County detected the ransomware on Jan 22, 2026, and notified law enforcement and state regulators. A review completed on April 16, 2026, identified affected individuals. The investigation is ongoing.
- Maine State AGas victim2026-05-12
Winona County (MN) reported an external system breach (hacking) occurring between January 18-22, 2026, discovered on April 16, 2026. The incident affected 6,196 individuals, including one Maine resident. The breach involved the acquisition of personal identifiers and government-issued IDs. Winona County provided written notification on May 12, 2026, and offered 12 months of credit and cyber monitoring services through IDX.
- Indiana State AGas victim2026-05-07
Winona County reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-18 and was reported on 2026-05-07. 4 Indiana residents were affected. 6,196 individuals affected in total.
- GLOBALLeak Siteas victim2026-05-01
Winona County is located in the Mississippi River blufflands of southeastern Minnesota. They have been negligent regarding security and the data they store, which has resulted in a breach and the public disclosure of all the confidential data they held. As a result, we are now able to offer you a large database containing resident records, tax and budget documents, police records, and data from other institutions.