More than a month after a cyberattack forced the city of St. Paul to shut down its computer systems, services are gradually coming back online.

In recent days, the city has restored its phone service, online water bill payments, and its Parks and Recreation payment systems, according to the mayor’s office. St. Paul Regional Water Services has said it won’t charge late fees for bills during the outage.

Library cataloging and checkout systems also have been restored, though as of Thursday, public internet terminals were still offline. Internally, network and shared drives have been restored as well, Mayor Melvin Carter’s spokesperson Jennifer Lor said in an email.

“We are now in recovery,” she wrote. “Our approach is deliberate, prioritized, and secure: systems are brought back only after testing and validation, with priority given to those essential for public safety, financial stability, and daily operations.”

City officials were confident by Aug. 20 that its Microsoft email and data storage were secure once again, according to the Office of Technology and Communications. Emergency services such as 911 were not interrupted by the cyberattack.

Reset nearly complete, lawmakers briefed

It’s not clear when city systems will be fully restored, though officials have signaled that the reset is nearly complete.

Carter and leaders of the city’s emergency response to the attack briefed members of Minnesota’s Legislative Commission on Cybersecurity at the state Capitol on Wednesday.

“This careful approach is allowing us to restore services with confidence, safely and securely,” said Jaime Wascalus, director of the Office of Technology and Communications for St. Paul. “We’re checking absolutely everything before we bring it online.”

Wascalus told state lawmakers that the city had a “trusted foundation” to rebuild its systems because it had clean data backups from July 25 that weren’t affected by the hack.

What is the cost?

Many questions remain about the July cyberattack, including how much it will cost the city.

Ransomware attacks on Baltimore and Atlanta in the late 2010s cost taxpayers more than $17 million, according to local news reports. In Atlanta, hackers demanded $51,000 in Bitcoin, the Atlanta Journal-Constitution reported in 2018. Like St. Paul, the city of Atlanta refused.

Carter said the FBI and Minnesota National Guard advised against paying a ransom.

St. Paul officials still haven’t said how much the hackers demanded or described the exact nature of their threats, though they have confirmed the city was targeted by a ransomware variant known as “Interlock” and that the attack came from a “sophisticated” and “money-driven” group known for stealing and selling sensitive information from corporations, hospitals and governments.

The federal government’s Cybersecurity and Infrastructure Security Agency issued a warning about Interlock attacks on July 22. The ransomware variant was first identified in September 2024.

Attack caught early on

City officials also haven’t disclosed how hackers gained access to city systems or in which department the attack originated.

Officials seem confident they avoided any widespread problems by catching the hack very early on. Hackers posted about 43 gigabytes of city parks and rec department data after St. Paul refused to meet their demands, a minuscule fraction of the 153 terrabytes the city keeps.

Carter said he didn’t think the hackers obtained any sensitive or valuable information because they posted it for free online after the city refused to pay them.

City officials have said there’s no evidence that resident information like names, addresses and phone numbers was affected.

They say its because bill payment information, like credit card numbers, is generally handled by “cloud-based” applications and should not have been affected by the hack.

Timeline

The city detected the attack on July 25 and started working to contain the threat within its computer systems. On July 28, the city fully shut down its networks to prevent more damage.

One of the first big hurdles was for the city to pay employees on time. City human resources had to set up a makeshift office and manually build new spreadsheets to handle payroll. They were able to send out checks by the Aug. 8 payday.

After resetting credentials, St. Paul city employees checked with technology staff to ensure their devices are installed with security software in this area of the Roy Wilkins Auditorium basement, pictured Saturday, Aug. 9, 2025. (Alex Derosier / Pioneer Press)

Two weeks after the attack, the city had set up a sprawling operation in the basement of Roy Wilkins Auditorium at the RiverCentre in downtown St. Paul for more than 3,000 employees to report in person for new login credentials.

City employees started showing up on Sunday, Aug. 10, and the effort took several days. The center was open from 6 a.m. to 10 p.m. Officials dubbed it “Operation Secure St. Paul.”

St. Paul had to borrow computers from Bloomington, Eden Prairie, Elk River, Minneapolis and Sherburne County to run the reset operation, Wascalus said.

As Carter declared a state of local emergency, Gov. Tim Walz on July 29 activated the Minnesota National Guard’s 177th Cyber Protection Team to aid the city in the effort. They worked with the city from July 29 to Aug. 17.

Hackers posted data on Aug. 11, though Carter called the contents “varied and unsystematic.” Data came from a network drive used by the Parks and Recreation department where employees stored personal files and was not tied to core systems like payroll or licensing, the mayor said.

Files included images of employee identification cards submitted to human resources, work documents, or even “personal items like recipes,” according to the city.

Once the more than 3,000 employees were cleared, the city slowly started restoring services.

Ramsey County Manager Ling Becker told the Ramsey County board at a recent meeting that the county and St. Paul had restored their email connection on Aug. 25.

St. Paul was one of six government bodies in Minnesota attacked with ransomware in the last year, Carter said.

On Aug. 4, the city of North St. Paul said its police department had been targeted in a hack that may have compromised “some data.”

Related Articles

MCA scores flat for MN students, St. Paul Public Schools sees slight improvements

West St. Paul police: Officer fatally shot man who fired at police during standoff

As The Lexington turns 90, a public celebration and a new chef

Molly Coleman is seated on the St. Paul City Council

Here’s a look at the University of St. Thomas’ Lee and Penny Anderson Arena as opening nears

By HANNA ARHIROVA, Associated Press

KYIV, Ukraine (AP) — Ukrainian President Volodymyr Zelenskyy said Friday that Ukrainian officials want to meet with U.S. President Donald Trump and European leaders next week to discuss recent developments in efforts to end the three-year war with Russia.

The proposed meetings appeared designed to add momentum to the push for peace, as Zelenskyy expressed frustration with what he called Russia’s lack of constructive engagement in the process while it continues to launch devastating aerial attacks on civilian areas.

Related Articles

Israel declares Gaza’s largest city a combat zone as the bodies of 2 hostages are recovered

Today in History: August 29, Olympic marathoner attacked by spectator

Japan uses AI-generated eruption of Mount Fuji to prepare Tokyo for worst-case scenario

Major Russian attack includes rare strikes on the center of Kyiv, killing at least 21

European nations start process to impose a ‘snapback’ of Iran nuclear sanctions at UN

Trump has bristled at Russian leader Vladimir Putin’s stalling on an U.S. proposal for direct peace talks with Zelenskyy, and said a week ago he expected to decide on next steps in two weeks if direct talks aren’t scheduled.

Trump complained last month that Putin “ talks nice and then he bombs everybody.” But he has also chided Ukraine’s attacks, and a major missile and drone attack on Ukraine overnight from Wednesday to Thursday that killed at least 23 people drew no public condemnation from the Trump administration. White House press secretary Karoline Leavitt noted Thursday that Ukraine has been striking Russian oil refineries.

Andriy Yermak, the head of Ukraine’s presidential office, is expected to meet Friday in New York with Trump’s special envoy Steve Witkoff to discuss preparations for upcoming meetings, Zelenskyy said during a briefing.

Zelenskyy told reporters in Kyiv that he expected “several meetings at different venues” with European leaders next week.

Ukrainian negotiators have been trying to move the peace process forward in talks in Qatar, Saudi Arabia, Turkey, the United Arab Emirates, Switzerland and the United States, he said.

Ukraine has accepted a U.S. proposal for a ceasefire and a meeting between Putin and Zelenskyy, but Moscow has raised objections.

Ukraine wants leaders involved

Zelenskyy accused Russia of dragging out negotiations, including by putting off a Russia-Ukraine summit with the argument that the groundwork for a possible peace settlement must be thrashed out first by lower officials before leaders meet.

That reasoning, Zelenskyy said, is “artificial … because they want to show the United States that they are constructive, but they are not constructive.”

“In my opinion, leaders must urgently be involved to reach agreements,” Zelenskyy added.

Kremlin spokesperson Dmitry Peskov on Friday reiterated Moscow’s long-held position that Putin “doesn’t rule out” meeting Zelenskyy, but only after progress is made “at the expert level.”

A summit “must be well prepared so that it can finalize the work that must first be carried out at the expert level,” Peskov told reporters during his daily conference call.

“At this point we can’t say that the expert work is in full swing, so to speak. No, unfortunately, not. We maintain our interest and our readiness for these negotiations,” he said.

Zelenskyy says more weapons are crucial for security

Zelenskyy urged swift secondary sanctions on countries that trade with Russia and thereby support its war economy.

Firefighters work on the site of a burning building after a Russian attack in Kyiv, Ukraine, early Thursday, Aug. 28, 2025. (AP Photo/Efrem Lukatsky)

The possible postwar security guarantees being assessed by Western countries to deter another Russian invasion in the future must include a secure supply of weapons for Ukraine, either through domestic production or Western provision, and U.S. weapons paid for by Europe.

Zelenskyy’s comments came after the death toll in a major Russian missile and drone strike on the Ukrainian capital rose to 23, including four children, officials said Friday. Ukraine needs more sophisticated Western air defense systems to counter such attacks.

Kyiv region observes a day of mourning

Authorities in the Kyiv region declared Friday an official day of mourning. Flags flew at half-staff and all entertainment events were canceled after Russia hammered Ukraine with almost 600 drones and more than 30 missiles overnight from Wednesday to Thursday, including rare strikes on downtown Kyiv.

A man carries a sofa at his apartment damaged by a Russian strike in Kyiv, Ukraine, on Thursday, Aug. 28, 2025. (AP Photo/Evgeniy Maloletka)

Rescue workers pulled 17 people from the rubble after the attack, among them four children, Interior Minister Ihor Klymenko said. The youngest victim was a 2-year-old girl. Some bodies have yet to be identified, and eight people remain unaccounted for, authorities said. More than 50 people were wounded.

Ukrainian Foreign Minister Andriy Sybiha said that, at the request of Ukraine, the U.N. Security Council was due to hold an emergency meeting Friday in response to the latest Russian aerial attack.

More diplomatic moves lie ahead

Putin is due to attend a meeting in China from Sunday that will also include Iran and North Korea, countries which have also aided Russia’s war effort, according to the United States.

From Sept. 9, world leaders are expected to attend the U.N. General Assembly, where Russia’s invasion will likely be discussed.

The Atlantic Council, a Washington think tank, noted that recent U.S. presidents have shied away from taking a tougher line with Putin for fear of a potential nuclear conflict.

“Putin knows that Washington and its allies have more than enough capacity to reverse his gains in Ukraine, but it is nearly certain that he doubts the United States has the will to do so,” the Atlantic Council said in an assessment this week.

It added that “the second Trump administration has repeatedly signaled that the United States has no vital interests at stake in this war.”

The season-opening win over Buffalo was coordinator Danny Collins’ first game calling the Gopher’ defense. It didn’t look like it.

Collins’ unit allowed only 151 total yards across a paltry 44 total plays in a 23-10 win at Huntington Bank Stadium. They had seven tackles for lost yards and allowed only one explosive play.

“(Collins) acted like he’s done it for 50 years,” head coach P.J. Fleck said postgame. “He’s so poised on the headsets. He knows what he wants. He’s a great communicator. He’s a great teacher. He’s really good with the staff.”

Gophers cornerback Za’Quan Bryan breaks up a pass in the second half against Buffalo in Minnesota’s season opener Thursday, Aug. 28, 2025, at Huntington Bank Stadium in Minneapolis. (Brad Rempel / Gopher Sports)

Collins wants his defense to create HAVOC, an acronym nickname for the unit where the “V” stands for violence.

“We went into the game looking to play … 60 minutes of violent football,” said defensive tackle Deven Eastern, who had four tackles and a half-tackle for loss. “That was our goal: Attack every rep and be as violent as we can.”

Fleck was particularly impressed with how the U defense responded after Drake Lindsey’s weird interception was returned 54 yards to Minnesota’s 23-yard line. Running back Darius Taylor’s pursuit kept the Bulls from scoring a game-tying touchdown. Then the defense gave up only five net yards and forced the Bulls to kick a field goal.

Last week, Collins called running back Al-Jay Henderson the Bulls “best player.” He had rushed for 5.3 yards per carry when going over 1,000 yards on the ground last year, but Minnesota kept him to 2.3 per rush and 25 total yards on Thursday.

In their first game without leader Cody Lindenberg, linebackers Maverick Baranowski and Devon Williams led the way with 10 and eight tackles, respectively. Williams added a sack, while Anthony Smith and Jalen Logan-Redding were credited with a half sack apiece. Minnesota had 10 total pressures on Buffalo’s 20 pass attempts.

“That’s our DNA,” Smith said. “That is why we named our defense HAVOC.”

A handful of personnel from NFL teams were in Minneapolis to watch Thursday’s game and the 6-foot-6, 290-pound Smith was likely on the top of their must-see list. On the day, he added an another tackle for loss and a pass breakup in 35 snaps.

Smith was asked what was different about Collins compared to previous coordinators Corey Hetherman and Joe Rossi.

“I would say FBI, football intelligence,” Smith said. “He definitely makes us learn a lot more about what is happening on the back end. It makes us better players going to the NFL.”

Smith said an example would be understanding the width of a split for a receiver and how that might tip off a crack block is coming his way.

“That is really special (information) to have,” Smith said.

New starting cornerbacks Za’Quan Bryan and Iowa transfer John Nestor each had a pass break-up as the Bulls passed for 107 yards.

The Gophers’ defense played without two nickel backs — Darius Green and Jai’Onte McMillan — and cornerback Mike Gerald. Plus, two backup defensive tackles are out — Theoin Randle has a foot injury, while Purdue transfer Mo Omonode is out for the season with a back injury.

“We’re gonna get some guys back, but I’m glad we have a few extra days as we keep going forward here,” Fleck said with Northwestern (La.) State next at home on Sept. 6. “So, rest up and go at it again.”

Related Articles

Gophers coach P.J. Fleck shares emotional message on Minneapolis shooting

Gophers pull away for a 23-10 win over Buffalo in season opener

Gophers defensive depth hit by absences in season opener

Gophers to pay Buffalo $1.45 million to play season opener

Get to know new Gophers quarterback Drake Lindsey 

By JOSH BOAK, Associated Press

WASHINGTON (AP) — President Donald Trump has told House Speaker Mike Johnson that he won’t be spending $4.9 billion in congressionally approved foreign aid, effectively cutting the budget without going through the legislative branch.

Trump, who sent a letter to Johnson, R-La., on Thursday, is using what’s known as a pocket rescission — when a president submits a request to Congress to not spend approved funds toward the end of the fiscal year, so that Congress cannot act on the request in the 45-day timeframe and the money goes unspent as a result. It’s the first time in nearly 50 years a president has used one. The fiscal year draws to a close at the end of September.

Related Articles

Zelenskyy seeks talks with Trump and European leaders on slow progress of peace efforts with Russia

With CDC in chaos, scientists and physicians piece together replacements for agency’s lost work

Trump revokes Secret Service protection for former Vice President Harris after Biden had extended it

Fed governor Cook to seek court order blocking her firing by Trump

China criticizes US senators’ Taiwan visit, calls it a threat to sovereignty

The letter was posted Friday morning on the X account of the White House Office of Management and Budget. It said the funding would be cut from the State Department and the U.S. Agency for International Development, or USAID, an early target of Trump’s efforts to cut foreign aid.

The last pocket rescission was in 1977 by then-President Jimmy Carter, and the Trump administration argues that it’s a legally permissible tool. But such a move, if standardized by the White House, could effectively bypass Congress on key spending choices and potentially wrest some control over spending from the House and the Senate.

The 1974 Impoundment Control Act gives the president the authority to propose canceling funds approved by Congress. Congress can vote on pulling back the funds or sustaining them, but by proposing the rescission so close to Sept. 30 the White House ensures that the money won’t be spent and the funding lapses.

Trump had previously sought to get congressional backing for rescissions and succeeded in doing so in July when the House and the Senate approved $9 billion worth of cuts. Those rescissions clawed back funding for public broadcasting and foreign aid.

The Trump administration has made deep reductions to foreign aid one of its hallmark policies, despite the relatively meager savings relative to the deficit and possible damage to America’s reputation abroad as foreign populations lose access to food supplies and development programs.

In February, the administration said it would eliminate almost all of USAID’s foreign aid contracts and $60 billion in overall assistance abroad. USAID has since been dismantled, and its few remaining programs have been placed under State Department control.

The Trump administration on Wednesday appealed to the Supreme Court to stop lower court decisions that have preserved foreign aid, including for global health and HIV and AIDS programs, that Trump has tried to freeze.

The New York Post first reported the pocket rescission.