Mitchell, South Dakota, Shuts Part of Network During Cybersecurity Investigation

Summary
Mitchell shut down part of its network while investigating a potential cybersecurity incident. The city said critical and emergency services remained operational and that it had no indication its email environment was affected.
Key points
- The city shut down part of its network as a precaution and brought in forensic experts to assess the incident and support recovery.
- Davison County staff were internally told not to open emails from the city, even if expected, according to a message obtained by the Mitchell Republic.
- Mayor Jordan Hanson said there was no indication that the city’s email environment was affected.
- Critical and emergency services remained operational; officials had not identified the affected systems or said when normal operations would resume.
- As of Friday evening, officials had not confirmed unauthorized access or data theft, identified an attack type or threat actor, or reported a ransom demand.
- The city did not link the incident to a February warning about fraudulent invoices impersonating city officials; legitimate city emails come from cityofmitchellsd[.]gov.
Article Details
- Victim Organization
- City of Mitchell, South Dakota
- Incident Type
- Potential cybersecurity incident affecting a limited portion of the city’s network; the attack type and whether unauthorized access occurred were not disclosed.
- Incident Date
- 2026-08-07
- Disclosure Date
- 2026-08-07
- Operational Impact
- The city shut down part of its network as a precaution and brought in forensic experts. Critical and emergency services remained operational. Officials had not said which systems were affected or when normal operations would be fully restored.
- Ransom Or Extortion
- No ransom demand was reported; officials had not disclosed whether one occurred.
- Claim Status
- alleged
