York County Email account breach exposes sensitive personal information
Learn More
York County, Pennsylvania is reporting a data breach involving unauthorized access to a county employee email account on September 20, 2024.
The investigation revealed that a hacker gained access to a county email account for a limited period of time on September 20, 2024, during which certain personal information contained within the account was potentially accessible and could have been taken.
The county's investigation did not confirm that any information was actually viewed, taken, or acquired as a result of the breach.
The exposed data include:
- Names
- Addresses
- Dates of birth
- Social Security numbers
- Driver's license numbers
- Medical information
- Health insurance information
- Online account usernames and passwords
The number of affected individuals is not disclosed.
The county also reported the event to regulatory authorities, reviewed their existing policies and procedures following the breach and are sending written notification letters to individuals who might have been impacted so they can take appropriate steps to protect their information.
Potentially affected individuals have been advised to monitor their financial statements and credit reports for suspicious activity, consider placing fraud alerts on their credit files, and contact the Federal Trade Commission if they discover their information has been misused. The county has established a dedicated assistance line at 1-866-497-0171, available between 9 a.m. and 7 p.m. Eastern time, for individuals with questions about the incident.
