Moorhead Parks and Rec Software Vendor Suffers Cyber Attack

City says no municipal systems were affected, but vendor's investigation is ongoing.

Mar. 20, 2026 at 10:22pm

The City of Moorhead, Minnesota, announced that one of its vendors, Sportsman Software, which provides the city's Parks and Recreation registration system, experienced a cyber attack in late February and early March. While no city-controlled information systems were affected, Sportsman Software is investigating whether any customer or employee data was compromised during the incident.

Why it matters

Cyber attacks on third-party vendors that provide services to municipalities can pose risks to residents' personal information and disrupt critical public services. This incident highlights the importance of strong cybersecurity measures and vendor risk management for local governments.

The details

The cyber attack caused an outage in Sportsman Software's system in late February and early March. The city says no City of Moorhead information systems were affected, but Sportsman Software is investigating whether any customer or employee data was compromised during the incident. The vendor has stated that no customer credit card data was exposed.

  • The cyber attack on Sportsman Software occurred in late February and early March 2026.
  • The City of Moorhead announced the incident on March 20, 2026.

The players

City of Moorhead

The local government of Moorhead, Minnesota, which uses Sportsman Software for its Parks and Recreation registration system.

Sportsman Software

The vendor that provides the Parks and Recreation registration system for the City of Moorhead and experienced a cyber attack on its systems.

Got photos? Submit your photos here. ›

What’s next

The City of Moorhead and Sportsman Software are continuing to investigate the cyber attack to determine the full extent of any data compromise.

The takeaway

This incident underscores the importance of municipalities carefully vetting their third-party vendors' cybersecurity practices and having robust incident response plans in place to mitigate the impact of cyber attacks on critical public services.