Nonprofit BronxWorks reports data breach through a hacked employee email account
Learn More
BronxWorks, a nonprofit organization based in Bronx, New York, reports a data breach following a cyber incident that compromised sensitive information.
BronxWorks is a community-focused nonprofit that delivers a variety of services aimed at improving the economic and social well-being of individuals and families across the Bronx. These services include homelessness assistance, healthcare management, eviction prevention, immigration aid, and legal support.
According to BronxWorks, an unauthorized party managed to access an employee’s email account, along with documents stored on the organization's SharePoint and OneDrive platforms.
The breach was initially detected on October 11, 2023, when BronxWorks identified suspicious activity in its digital infrastructure. An internal investigation, supported by cybersecurity experts, confirmed that unauthorized access to employee email accounts and associated files occurred between September 1, 2023, and October 11, 2023. The investigation revealed that certain emails, attachments, and documents contained confidential information.
The breach may have exposed personal and sensitive information, including:
- Full names
- Social Security numbers
- Passport numbers
- Digital signatures
- Medical information
- Financial account information
- Driver’s license numbers
BronxWorks has not disclosed the total number of individuals affected.
The organization is actively reaching out to those impacted, providing information on what data was compromised and guidance on steps to mitigate the risk of identity theft or fraud.
