Somerset County Children and Youth Services reports cyberattack, data breach
Learn More
Somerset County Children and Youth Services (CYS) department in Pennsylvania is reporting a data breach that exposed protected health information. Somerset County Children and Youth Services provides social services to vulnerable populations including children, families, and individuals requiring protective services.
The cyber attack targeted email systems within the CYS department and breached multiple email accounts. The breach was detected on June 26. The unauthorized access continued for five days until June 30, during which time cyber criminals may have accessed emails containing protected health information. Exposed data includes:
- Full names
- Social Security numbers
- Dates of birth
- Information related to services received from County CYS
- Dates of medical service
- Physician or medical facility information
- Information related to medical conditions, treatments, or diagnoses
- Medical record numbers
- Patient account numbers
- Insurance identification numbers
- Medicare/Medicaid numbers
- Information related to paternity testing (for a small number of individuals)
- Financial account numbers (for a small number of individuals)
The number of affected individuals has not been disclosed. County officials confirmed that anyone who received or is currently receiving services from the CYS department may have been impacted by the breach.
Somerset County will provide written notice to all individuals affected by the breach and offer complimentary credit monitoring services where appropriate.
