County of Allegheny

Allegheny County, Pennsylvania, notified consumers of a data breach stemming from the MOVEit file transfer vulnerability exploited by the Cl0p ransomware group in May 2023. The incident involved the exfiltration of personal information, including names and Social Security numbers. The County engaged forensic experts, patched the vulnerability, and offered two years of complimentary credit monitoring and identity protection services to affected individuals.

Allegheny County (PA) reported a 2023 cyber-attack affecting 689,686 individuals. The incident involved a business associate compromise resulting in the exposure of PHI, including SSNs, DOB, driver's licenses, and medical data. The covered entity notified HHS, individuals, and media, and enhanced security safeguards.

Affected (this filing): 689,686