Incident

Union County hit by ransomware attack compromising personal information


Learn More

Union County, Pennsylvania has confirmed it's the victim of a ransomware attack that compromised sensitive personal information related to individuals involved in county law enforcement, court-related matters, and other county business. 

County officials discovered the ransomware on their computer network on March 13 and launched an investigation with assistance from nationally recognized third-party cybersecurity and data forensics consultants. The county also alerted federal law enforcement about the breach.

By March 17, investigators determined that cyber criminals had exfiltrated certain data from the county's network, including personally identifiable information. Potentially exposed data includes:

  • Social Security numbers 
  • driver's license numbers.

The county has conducted an enterprise-wide password reset, deployed additional security tools and is acively monitoring the network using endpoint detection tools to ensure containment

Officials are conducting a review to determine what specific information was involved and who has been affected.

After completing the review the county will provide required written notices to affected individuals and offer complimentary credit monitoring services where appropriate.

Union County hit by ransomware attack compromising personal information