Lorain County auditor's office hit by ransomware attack exposing employee and vendor data
Learn More
The Lorain County Board of Commissioners in Ohio is reporting a data security incident that compromised sensitive financial information belonging to county employees and vendors.
The breach was discovered on May 23, 2025, and was caused by a ransomware attack.
The attack was claimed by the Global ransomware gang, which threatened to release stolen data unless ransom demands were met. The ransomware group alleged to be in possession of "lots of private information. Bank accounts and more.
According to the release from Lorain County Board of Commissioners, "a limited number of files containing personal information relating to our employees and vendors were potentially impacted". The exposed data includes:
- Social Security numbers
- Bank account numbers
- Routing numbers
The number of affected individuals is not disclosed.
County officials stated that "to the best of our knowledge, this incident impacted information ONLY contained in the Lorain County Auditor's Office. It's unclear if the breach extended further than the auditor's office, since other departments within Lorain County also started to report issues at the end of May, and several departments were closed.
