The City of St. Helena detected unauthorized network activity on May 13, 2024, with the breach occurring between April 29 and May 13, 2024. An unauthorized third party accessed personal information including names, contact details, dates of birth, government IDs (SSN, driver's license), financial account details, and limited medical information. The city engaged cybersecurity experts and a data-review firm. Notices were sent on August 23, 2024. Some affected individuals were offered 12 months of Experian IdentityWorks.