City of Philadelphia

City of Philadelphia reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-08. 70 Massachusetts residents were affected.

The City of Philadelphia experienced an external system breach (hacking) between May 26 and July 28, 2023, where an unauthorized actor accessed email accounts. Potentially exposed data included names, addresses, SSNs, and financial account information for approximately 35,881 individuals. The City notified law enforcement, HHS, and affected individuals, offering 12 months of credit monitoring.

The City of Philadelphia notified consumers of unauthorized access to certain email accounts between May 26 and July 28, 2023. While no actual acquisition was confirmed, names and impacted data elements were potentially accessible. The City engaged third-party cybersecurity specialists and is offering credit monitoring and identity theft restoration services through Kroll.

City of Philadelphia reported to HHS on 2023-10-20 a Hacking/IT Incident affecting 6107 individuals. Breached information located on Email. The incident involved an email phishing scheme compromising PHI (names, DOB, addresses, clinical/financial data). The CE implemented enhanced email monitoring detection.

Supplemental notice filed by the City of Philadelphia with the NH AG regarding a phishing incident affecting employee email accounts. Unauthorized access occurred intermittently between March 11, 2020, and January 14, 2021. The breach exposed PHI, SSNs, driver's licenses, and financial data of approximately 3 additional New Hampshire residents. Notices were sent on August 6, 2021.

The City of Philadelphia reported a data breach affecting 4 Maine residents. The breach, an external system hack, occurred on March 11, 2020, and was discovered on July 12, 2021. The compromised information included names and Social Security numbers. The city offered 12 months of credit monitoring and identity restoration services through Kroll to those affected.

Supplemental notice from City of Philadelphia to NH AG regarding phishing incident affecting ~3 NH residents. Unauthorized access to employee email accounts occurred March 2020–Jan 2021. Data included names, SSNs, driver's licenses. City reset passwords, enhanced security, and offered Kroll monitoring.

The City of Philadelphia reported a data breach affecting 49,255 individuals. The incident, which occurred on March 11, 2020, and was discovered on May 18, 2021, was described as an external system breach (hacking). The compromised information included names and Social Security Numbers. Affected individuals were notified on June 11, 2021, and offered 12 months of credit monitoring and identity restoration services from Kroll.

City of Philadelphia DBHIDS and business associate CBH notified individuals of a phishing attack impacting employee email accounts. Unauthorized access occurred March 11–Nov 16, 2020. Affected data included names, SSNs, DOBs, medical record numbers, and PHI. City reset passwords, enhanced security, and offered 12 months of identity monitoring.

City of Philadelphia reported a data breach to the Indiana Attorney General. The breach occurred on 2020-03-11 and was reported on 2021-02-04. 22 Indiana residents were affected. 18,008 individuals affected in total.

City of Philadelphia reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-04. 43 Massachusetts residents were affected. The report records the breach type as electronic.

City of Philadelphia reported to HHS on 2020-06-01 a Hacking/IT Incident affecting 233543 individuals. Breached information located on Email. Employees were victims of an email phishing scheme affecting ePHI.

City of Philadelphia reported to HHS on 2019-07-19 a Loss affecting 1458 individuals. Breached information located on Laptop. An employee's unencrypted laptop was stolen from a public bus, exposing names, dates of birth, and treatment information. No unauthorized system access occurred. The entity encrypted all mobile devices.