City of Sheboygan reports cyber breach affecting 67,947 residents

A cybersecurity incident has compromised the sensitive personal information of 67,947 Americans, leaving them exposed to fraud or identity theft. The City of Sheboygan, Wisconsin, disclosed the breach in a filing with the Office of the Maine Attorney General. The law firm representing the city, Constangy, Brooks, Smith and Prophete, LLP, reported that unauthorized access may have occurred to data stored on a segment of the city’s network.

The investigation revealed that the personal information of affected individuals, including names, dates of birth, Social Security numbers, license plate or vehicle ID numbers, and drivers’ license or state ID numbers, may have been stolen. The breach was discovered on October 31, 2024, when the city experienced an encryption event that disrupted its network. Immediate steps were taken to secure the digital environment, and a digital forensics and incident response firm was engaged to conduct a thorough investigation. On May 14, 2025, the city confirmed that certain individuals’ personal information had been affected by the incident.

In response to the breach, the city has sent letters of notification to those affected, informing them about the data breach and offering free identity protection services to victims whose Social Security numbers were compromised. The city government is also implementing enhanced security protocols to mitigate the risk of future data breaches. This incident underscores the ongoing threat of cybersecurity breaches and the importance of robust data protection measures. The city's proactive response, including the engagement of external experts and the implementation of enhanced security protocols, demonstrates a commitment to safeguarding the personal information of its residents.