The files posted "appear to come largely from a single shared network drive" used by the Parks and Recreation Department, St. Paul Mayor Melvin Carter said on Monday evening.

Bill payment information, like credit card numbers, is generally handled by “cloud-based” applications and should not have been affected by the hack, the mayor said.

The group behind the cyberattack on St. Paul has claimed to have posted online 43 gigabytes of data stolen from the city's systems, Mayor Melvin Carter said Monday evening. Ubah Ali explains the operation to increase security and to help employees whose information is now at risk.