A network disruption in November 2025 was confirmed as a cyber incident; certain files may have been viewed or taken between November 13 and 18, 2025, including data relating to customers’ members.
On April 29, 2026, an Excel file Lockton sent to three RFP participants on behalf of Dexcom inadvertently included additional employee personal information.
Between January 2024 and May 2025, a County employee accessed personal information in electronic systems without a legitimate business reason, including names, case and CIN numbers, dates of birth, SSNs and public assistance benefit information.
Unauthorised access on April 9, 2026 resulted in files containing patient information being acquired. The notice posted June 11 (St. Mary’s patients) states acquisition; the notices posted July 29 say files may have been taken.
Suspicious activity was found around March 27, 2026; on May 1 the investigation found an unauthorised individual briefly accessed the network and may have accessed files.
Possible data leak: An actor gained access via credential compromise around February 12, 2025; systems held names, addresses, dates of birth, SSNs and licence details. The college says there is no evidence data was removed.
Around February 17, 2026, one employee’s computer was accessed without authorisation; names, addresses, SSNs, dates of birth and licence or ID numbers may have been obtained.
Suspicious activity in users’ cloud applications was detected on November 24, 2025; a criminal third party accessed the accounts and downloaded files containing names, account numbers, dates of birth and SSNs or other ID numbers.
On December 15, 2025, an unauthorised individual accessed one employee email account for a limited period; certain emails may have been accessed or removed.
On or about March 5, 2026, an unknown actor accessed and acquired data in the email environment, including names with SSNs, dates of birth, medical and health insurance information.
Possible data leak: Systems were accessed without authorisation around October 13, 2025; on May 11, 2026 files subject to unauthorised access or acquisition were found to contain personal information.