City of Sebastopol

The City of Sebastopol notified affected individuals of a data breach involving unauthorized access to an employee's email account between April 28 and May 11, 2021. The incident exposed names, SSNs, driver's license numbers, financial account info, and/or health information. The City engaged a cybersecurity firm, secured the account, and offered one year of Experian IdentityWorks credit monitoring.

The City of Sebastopol experienced a data breach due to an external system breach (hacking) that occurred from April 28, 2021, to May 11, 2021. The breach was discovered on August 9, 2021, and affected 1,180 individuals, including one Maine resident. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their associated security codes, access codes, passwords, or PINs. The city provided written notification to affected consumers on December 22, 2021, and offered one year of credit monitoring, fraud consultation, and identity theft restoration services through Experian.

Affected (this filing): 1