Payload ransomware group claims attack on Manitoba's RM of Gimli
The Rural Municipality of Gimli in Manitoba's Interlake region was hit by a cyberattack in late April that disrupted its IT systems and left the municipal office temporarily unable to process bill payments, according to a Winnipeg Free Press report summarized by the incident tracker KonBriefing. The municipality engaged an outside cybersecurity firm.
A ransomware group calling itself Payload added the municipality to its leak site on April 27, according to ransomware.live, and threatened to release data. The municipality has not publicly confirmed what, if any, data was taken, and the group's claims have not been verified.
Gimli was one of several Manitoba public bodies hit this year. In October, CBC listed it alongside Winnipeg's Health Sciences Centre among the province's 2026 cyberattack victims.
Residents should be cautious of unexpected messages or invoices that appear to come from the municipality and confirm any payment request by calling the municipal office at 204-642-6650.
