DataBreachCaseFile.com
MonitoringIndiana AG filing · September 29, 2026

City of McMinnville, Indiana Reports 2026 Data Breach of Records

The City of McMinnville in Indiana experienced a data breach in June 2026, which was formally reported in September of the same year. This incident led to the exposure of various sensitive personal records maintained by the municipal government, potentially impacting residents and employees. Individuals affected should understand the types of information compromised and take steps to secure their personal data.

State
Indiana
Breach date
June 1, 2026
Reported
September 29, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Government ID Number
  • Address History
  • Financial Account Number
  • Wage and Compensation Information
  • Tax Return Information

The City of McMinnville, a municipal government entity in Indiana, officially reported a data breach on September 29, 2026. This incident, which city officials indicated occurred on June 1, 2026, suggests that sensitive personal information under the city's care may have been accessed without authorization. As a local government, McMinnville manages a wide array of citizen and employee records essential for its operations.

While the public filing did not specify the exact nature or cause of this cybersecurity incident, breaches within governmental organizations frequently stem from sophisticated cyberattacks, such as ransomware deployments, unauthorized access to internal databases, or vulnerabilities within third-party vendor systems used for city services and administration. Such intrusions can allow malicious actors to exfiltrate significant volumes of confidential data.

The data categories reportedly exposed in the City of McMinnville breach include Full Name, Social Security Number, Date of Birth, Government ID Number, Address History, Financial Account Number, Wage and Compensation Information, and Tax Return Information. This combination of exposed data poses a substantial risk for individuals, potentially leading to identity theft, financial fraud, and other forms of personal exploitation.

For those who receive an official notification regarding this breach, it is crucial to take protective measures. Regularly monitor financial account statements and credit reports for any unusual activity. Consider placing a fraud alert or a security freeze on your credit files with all three major credit bureaus. Remain cautious about unsolicited communications, especially those requesting personal details, as they could be phishing attempts.

City officials have indicated that the investigation into the breach is currently in a monitoring phase. The details concerning this data security incident have been made public through official regulatory filings, providing a record for affected residents and current or former employees.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Replace exposed ID documents

    Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases