The City of Tucson, Arizona, has revealed it was the victim of a data breach that compromised the personal information of more than 125,000 people.
According to a data breach notification sent to affected individuals, an attacker broke into the city’s network between May 17 and 31 and exfiltrated an unspecified number of files containing sensitive information from 123,513 people.
On September 23, the City of Tuscon alerted potential victims whose names and social security numbers the attacker may have compromised during the attack.
Notification letters sent to affected individuals also show that no evidence of misuse of this personal information has yet been detected. Those affected by the data breach are asked to check their credit reports for suspicious activity that could indicate incidents of identity theft and fraud with their personal information.
The City is also providing impacted individuals with a year of free Experian credit monitoring and identity protection services, as well as identity theft prevention counseling, reviewing its existing cybersecurity policies and procedures, evaluating additional measures and safeguards to protect against such events in the future, and apologizing for any inconvenience.
The sources for this piece include an article in BleepingComputer.