City of McMinnville Data Breach: What to Do After Notification

The City of McMinnville, a municipal government entity in Oregon, disclosed a data security incident on September 29, 2026, stemming from a breach that occurred on June 1, 2026. As a local government, the City handles a vast amount of sensitive information for residents, local businesses, and municipal employees through services like utility billing, tax filings, and human resources administration.

Investigations confirmed that a wide range of personal information was compromised. This includes individuals' Full Name, Social Security Number, Date of Birth, Address History, Driver's License Number, Banking and Financial Account Details, Utility Account Information, and Wage and Compensation Information. Such extensive exposure can lead to severe risks, including identity theft, financial fraud, and targeted scam attempts.

Entities entrusted with personal data, especially government bodies, have a legal obligation under Oregon statutes to implement robust security measures. The occurrence of this breach suggests potential failures in safeguarding private information, such as inadequate digital protections or insufficient cybersecurity protocols. These failures can constitute negligence and a breach of the duty owed to the public.

If you received a data breach notification letter from the City of McMinnville, it confirms that your personal information was exposed. You do not need to wait for actual financial harm to pursue legal options. The increased risk of future identity theft and the time spent protecting yourself are grounds for legal action. Our team is reviewing this incident and offers free case evaluations to help you understand your rights and potential recourse.