Dragons EyeRansomware tracker

US state report · MN

Ransomware claims in Minnesota

Claims that ransomware groups posted against organizations we could place in Minnesota, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
55
So far in October 2026
0Month in progress, not in the trend
Address on own website
51Confirmed location
State named in claim
4Inferred location
Latest claim
Sep 24, 2026

Claims per month in Minnesota

Located Minnesota claims in the last 12 complete months (UTC).

  1. October 2025: 9
  2. November 2025: 2
  3. December 2025: 4
  4. January 2026: 3
  5. February 2026: 4
  6. March 2026: 4
  7. April 2026: 6
  8. May 2026: 4
  9. June 2026: 2
  10. July 2026: 8
  11. August 2026: 6
  12. September 2026: 3

Top sectors

2 claims had no sector label and are not shown.

  1. Manufacturing10
  2. Construction6
  3. Healthcare services4
  4. Business Services3
  5. Real Estate / Real Estate Management3
  6. Financial Services2
  7. Healthcare2
  8. Advertising Services1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Minneapolis8
  2. Bloomington2
  3. Burnsville2
  4. Cambridge2
  5. Lakeville2
  6. Plymouth2
  7. St. Paul2
  8. White Bear Lake2

Latest claims in Minnesota

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Minnesota, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Sep 24, 2026Strack CompaniesakiraReal Estate / Real Estate ManagementMN Named in claim2+ sources
Sep 15, 2026triniticaring.orgsafepayHealthcareElk River, MN Own website2+ sources
Sep 10, 2026mankatoclinic.comchaosHealthcare servicesMankato, MN Own website2+ sources
Aug 20, 2026usbank.comlockbit5Financial ServicesMinneapolis, MN Own website2+ sources
Aug 17, 2026Otter Tail County, MinnesotaINC RansomLocal administrationsFergus Falls, MN Own website2+ sources
Aug 11, 2026Ginger ConsultingkrakenAdvertising ServicesMinneapolis, MN Own websiteSingle source
Aug 5, 2026Thermo KingDark ProjectTransportationBloomington, MN Own website2+ sources
Aug 5, 2026Thermo KingDark ProjectManufacturingBloomington, MN Own websiteSingle source
Aug 3, 2026Albers Mechanical ContractorsakiraConstructionSt. Paul, MN Own website2+ sources
Jul 27, 2026Park Manufacturing Corp.Global Secret GroupManufacturingCambridge, MN Own website2+ sources
Jul 19, 2026Synergy ProductsqilinManufacturingMN Own website2+ sources
Jul 17, 2026Paragon Store FixturesinterlockRetail (distribution)Big Lake, MN Own website2+ sources
Jul 14, 2026GALAXY PRECISIONPrinzEugenAutomation Machinery ManufacturingAlbany, MN Own websiteSingle source
Jul 10, 2026The Schuett CompaniesdragonforceReal Estate / Real Estate ManagementGolden Valley, MN Own website2+ sources
Jul 4, 2026Eureka Construction INCtitanConstructionLakeville, MN Own website2+ sources
Jul 1, 2026www.northern-access.comkrybitTransportDuluth, MN Own website2+ sources
Jun 18, 2026legendsmn(Blue Ox, Paul Bunyan, Lumberjack Electric)nightspireCulture and entertainmentMN Own website2+ sources
Jun 10, 2026Centra Sota CooperativeworldleaksAgriculture and Food ProductionBuffalo, MN Own website2+ sources
May 25, 2026epbinsurance.comdragonforceNot reportedMN Own website2+ sources
May 25, 2026Thomas M HughesqilinLegalE Roseville, MN Own websiteSingle source
May 25, 2026pratthomes.comqilinManufacturingMN Own websiteSingle source
May 5, 2026Punch & Associates Investment ManagementakiraWealth ManagementMN Named in claim2+ sources
Apr 29, 2026Winona CountyinterlockGovernment and administrationsWinona, MN Own website2+ sources
Apr 26, 2026Walman OpticalmedusaDistributionMinnetonka, MN Own website2+ sources
Apr 14, 2026R L Larson ExcavatingakiraConstructionSt Cloud, MN Own website2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.