City of Philadelphia Discloses Data Breach After Five Months

The City of Philadelphia is investigating a data breach that occurred five months ago, in May, where attackers may have gained access to City email accounts containing personal and protected health information. The breach was discovered in May, but the attackers may have accessed the compromised accounts for at least two months after the incident was detected. The types of information exposed include demographic, medical, and limited financial information. The City is conducting a thorough review and will provide written notification to affected individuals. The cause of the breach and the reason for the delay in disclosing it are still unknown. This is not the first breach for the City, as a similar incident occurred in 2020.