The city of Tucson, Arizona, has disclosed a data breach affecting the personal information of more than 125,000 people.
See also: Uber: Former executive found guilty of concealing data breach
As revealed in a data breach notification sent to affected individuals, an attacker breached the city's network and exfiltrated an unknown number of files containing sensitive information.
See also: BlackByte ransomware: Uses the new BYOVD technique
Threat actors had access to the network from May 17 to May 31 and may have had access to documents containing information on 123,513 people.
The city of Tucson began notifying affected individuals on September 23 that, among the sensitive personal information exposed during the incident, the attacker could have accessed affected individuals' names and Social Security numbers.
"On September 12, the audit was completed and it was determined that the information in question included certain personal information," the city revealed in a separate announcement on its official website.
"The information in the records potentially accessed included certain individuals' names, social security numbers, driver's license or ID numbers , and passport numbers."
See also: Optus data breach: Man arrested for blackmailing company customers
There is no evidence of misuse of personal information
The notification letters sent to affected individuals also reveal that no evidence has been found to prove that this personal information has been misused so far.
Those affected by the data breach are advised to monitor their credit reports for any suspicious activity that could hint at incidents of identity theft and fraud involving their personal information.
Information source: bleepingcomputer.com
