RansomHub ransomware group targets Minnesota's Lower Sioux Indian community
Learn More
The Lower Sioux Indian Community in Minnesota is facing significant operational disruptions following a cyberattack that has been claimed by the RansomHub ransomware-as-a-service operation.
The incident was initially disclosed by tribal officials on Friday 28th of March 2025, and later confirmed by the threat actors earlier this week. The attack has severely impacted multiple critical systems across the community, including:
- Healthcare facility operations
- Government center functions
- Casino and gaming systems
- Hotel systems
- Tribal communication channels (phones, emails, and fax machines)
- Digital gaming machines at the casino
The number of affected individuals or any information about potential data theft has not been disclosed. The financial impact of the attack is also currently unknown.
Tribal officials have stated they are "working with third party experts to address the incident, with the goal of returning to normal operations as quickly and as safely as possible."
This attack is part of a concerning pattern targeting tribal communities. More than a month ago, Michigan's Sault Ste. Marie Tribe of Chippewa Indians (also known as Sault Tribe) was also compromised.
