The City of Tucson, Arizona, has disclosed a data breach affecting the personal information of more than 125,000 individuals.
As revealed in a notice of data breach sent to affected people, an attacker breached the city's network and exfiltrated an undisclosed number of files containing sensitive information.
The threat actors had access to the network between May 17 and May 31 and might have accessed or stolen documents containing the information of 123,513 individuals.
"On May 29, 2022, the City learned of suspicious activity involving a user's network account credential," the
data breach notification reads.
"On August 4, 2022, the City learned that certain files may have been copied and taken from the City's network."
The City began notifying potentially impacted individuals on September 23 that, among the sensitive personal information exposed during the incident, the attacker could have accessed the affected individuals' names and Social Security numbers.
"On September 12, this review concluded, and the review determined that the information at issue included certain personal information," the City revealed in a
separate announcement on its official website.
"The information within the potentially accessed files included certain individuals' name, Social Security number, driver's license or state identification number, and passport number."
