The files posted "appear to come largely from a single shared network drive" used by the Parks and Recreation Department, St. Paul Mayor Melvin Carter said on Monday evening.

Over the next few days, about 3,500 city employees will be required to do an in-person password reset and device security check.

For the second day, a steady stream of St. Paul employees streamed in and out of Roy Wilkins Auditorium, which had been quickly converted to a password reset center.