Mower County suffered a ransomware attack on June 18, leading to the theft of protected health information (PHI) from individuals receiving services from its Health and Human Services Department. While systems were largely restored, the county confirmed that cybercriminals exfiltrated sensitive data, though the full scope—including the exact number of affected individuals and the precise nature of the compromised records—remains under investigation. The county is offering complimentary credit monitoring to impacted parties and has engaged cybersecurity forensics experts and federal law enforcement to mitigate further risks. Authorities are reviewing the stolen data to identify affected residents and provide written notices. The incident has prompted Mower County to strengthen network defenses, monitor systems more rigorously, and urge potentially impacted individuals to scrutinize financial and health insurance statements for fraudulent activity. The attack underscores vulnerabilities in local government cybersecurity, particularly concerning healthcare data protection.