Michigan City, Indiana reports ransomware attack, data stolen
Learn More
Michigan City, Indiana has confirmed that a network disruption on September 23, 2025 was a ransomware attack that compromised municipal data and disrupted city operations. The city initially characterized the incident as a "network disruption". Later they disclosed the ransomware attack on October 10, 2025.
The cyberattack targeted the city's e-commerce database and disrupted online and telephone access for city employees. After detecting the breach city officials took substantial portions of the network offline as a precautionary measure to prevent further compromise.
The attack was claimed by the Obscura ransomware gang. The gang alleges that they stole 450 gigabytes of data. The threat actors posted all stolen data for download on their dark web leak site.
The number of affected individuals and types of exposed data are not disclosed.
Law enforcement agencies are actively involved in the investigation. City officials emphasized that critical operations continued to function throughout the incident. Police services, central administrative services, and emergency dispatch operations remained operational during the attack and recovery period. All e-commerce systems have since been restored to operational status.
The city will continue to provide public updates as the recovery and investigative process progresses, when legally permissible given the active law enforcement investigation.
