Digital Security Incident Response
Saint Paul Public Library
Innovation Synopsis
Saint Paul Public Library swiftly and safely responded to a citywide digital security breach to minimize impact to community members and staff by using innovative crisis management strategies.
Challenge/Opportunity
On July 25, 2025, the city initiated a full system shutdown in response to a digital security incident. The city paused the service as a precaution to prevent any potential pathway between public use and internal systems.
For SPPL, that meant the following services were unavailable:
-ILS (Sierra)
-Phone notification/renewal
-self-checks; no AMH
-public and staff computers
-printing
-telephones at VOIP locations
-internal comms channels
SPPL houses a total of 350 public devices and computers and 270 staff computers. Last year, 120,000 visitors used a computer at a SPPL library location and over 96,000 used the library’s free wi-fi. To these residents, SPPL is a lifeline in helping people who have been historically excluded from opportunities for economic, social, health and educational wellbeing access and leverage the tools of technology. SPPL employs 181 FTE and a total of 230 staff. In St. Paul, over 15,000 residents do not have sufficient connectivity in their homes.
Key Elements of Innovation
SPPL noticed quickly that the stress of the digital security incident weighed heavily on staff. In response, the library creatively went old school. Through fax, library staff were notified about tech and HR updates, and also invited to participate in engaging activities (to be shared via fax!) with other locations. These communications arrived at a regular cadence to provide consistency for staff.
SPPL also observed quickly that the library was often overlooked at citywide discussions regarding the response, and often city colleagues did not understand the full impact of having no technology at libraries. Library leadership persistently yet kindly got themselves to the table so the library had a voice in moving forward.
In the months following the recovery, SPPL’s technology innovations meant to minimize disruptions from a future incident include:
-Changing circulations logins regularly
-Getting desktops with wi-fi cards
-Purchasing emergency cell phones for each location
Achieved Outcomes
SPPL is proud that the restoration of the public internet network took only 7 weeks, which is noteworthy given the scope of the incident. SPPL leadership had a seat at the table which built trust with partners and library staff. The restored systems were thoroughly tested, validated, and secured with modern safeguards. By fully restoring public internet access and public printing, SPPL was once again able to offer students, families, & job seekers the tools they need to learn, grow, and thrive in their neighborhood libraries.
The return of public internet access came with strengthened safeguards that protect library systems while ensuring accessibility:
-Segmented and secure public internet traffic that is separate from the city’s internal networks
-Simpler access with fewer steps/log-ins
-An open network ensures residents seeking public access can safely access it
These restorations reflect steady progress in strengthening internal operations and ensuring reliable service delivery.
Supporting Materials:
- KSTP News Article: Public internet restored at St. Paul libraries, rec centers after cyberattack
- Facebook Video: "Public internet is fully BACK at all Saint Paul Public Library locations — and we are excited!
Free public internet, as well as public printing, isn’t just convenient — it’s essential. Students count on it for homework, job seekers for applications…"


