Localish highlights how every recovery tells a story of relief, gratitude, and human connection. With decades of experience, proprietary technology, and compassionate service, DriveSavers brings lost data back to life.
Press Coverage: Geek Insider Highlights Municipal Cybersecurity Incident
Press Coverage: Geek Insider Highlights Municipal Cybersecurity Incident

DriveSavers Data Recovery’s Head of Cyber Recovery Services, Andy Maus, was recently featured in Geek Insider, offering analysis of the ransomware attack that struck St. Paul, Minnesota, earlier this year.
The article explains why municipalities remain prime targets for cybercriminals, the lessons other cities can draw from past incidents, and how a city or town or its governing body can protect its systems and the public by building resilience through preparation and planning.
What Happened in St. Paul
On July 25, 2025, the City of St. Paul detected suspicious activity on its network. By July 29, officials had shut down most city systems to contain what was initially described to the public as a “digital security incident.” It was later confirmed to be ransomware. While emergency services and utilities remained operational, city departments faced widespread disruption — forcing employees to reset credentials and residents to wait for access to key online services.
Why Cities Are Vulnerable
Municipalities are frequent ransomware targets not because their data is uniquely valuable, but because their defenses are often underfunded, outdated, and stretched across sprawling networks. Attackers know that even modest disruptions — like shutting down billing systems or police records — can create immediate pressure on local governments.
Lessons from Other Cities
The Geek Insider article points to high-profile incidents in Baltimore (2019) and Atlanta (2018), where ransom demands were relatively small but recovery costs soared into the millions. More recent cases, like Ridgefield Public Schools in Connecticut, show how swift action can prevent worst-case scenarios. The lesson is consistent: waiting to build resilience is far more expensive than investing in it ahead of time.
Building Cyber Resilience
Andy emphasizes that resilience requires investment in security infrastructure, adoption of zero-trust principles, employee training, and — critically — preparation. Municipalities should not only maintain offline backups and rehearse incident response plans but also identify a trusted data recovery partner in advance. That step ensures they can move quickly into recovery without needing to scramble for outside help during a crisis.
Why This Matters
The St. Paul ransomware attack highlights a reality that every municipality must face: ransomware is not a rare event, but part of the operating environment for city governments. Transparent communication, strong defenses, and tested recovery strategies are the keys to protecting both public services and public trust.

