The City of Sheboygan in Wisconsin fell victim to a ransomware attack in late October, orchestrated by the Chort ransomware operation. The breach resulted in the theft of sensitive personal data belonging to nearly 67,000 individuals, including Social Security numbers, state IDs, and license plate numbers. Initially, officials downplayed the likelihood of data compromise, but subsequent investigations confirmed the exfiltration of personally identifiable information (PII). While the attack did not disrupt emergency services, the exposure of such critical data poses significant risks of identity theft and fraud. Affected individuals are being offered one year of complimentary identity protection services as a remedial measure. The Chort group has been linked to similar attacks on other institutions, including educational and government entities in New York, Georgia, and Kuwait.

The city of Sheboygan experienced a ransomware attack in late October, leading to unauthorized network access by an external party. The attack disrupted city operations, prompting officials to isolate the computer network and collaborate with cybersecurity experts to restore functionality. A ransom demand was received, and the incident was reported to law enforcement, with the city adhering to their guidance. While the investigation remains ongoing, officials stated that no sensitive personal information is believed to have been compromised at this stage. However, the attack caused operational disruptions, including potential delays in city services. Residents were assured that notifications would be issued if any sensitive data were found to be affected. The city emphasized its commitment to transparency, trust, and security while managing the incident, though phone lines remained available for assistance.

The City of Sheboygan, Wisconsin, suffered a ransomware attack on October 31, 2024, executed by the Chort ransomware gang. The breach exposed personal information of 67,000 individuals, including Social Security numbers, state IDs, and license plate numbers, which were confirmed stolen after a cybersecurity investigation concluded on May 14, 2025. Initially, the city denied evidence of data theft, but later filed breach notification letters with regulators, acknowledging the compromise. The attack disrupted municipal operations, though emergency services remained functional. The city reported the incident to law enforcement and followed their guidance, offering one year of identity protection services to affected individuals. The Chort gang had previously claimed responsibility in November 2024, sharing screenshots of stolen file archives and demanding a ransom. Sheboygan is among multiple Wisconsin government entities targeted by ransomware in recent years, alongside other victims like Hartwick College (New York) and Kuwait’s Public Authority of Agriculture Affairs and Fish Resources.