Phila.gov
Click for complete Notice of Privacy Incident – Oct. 20, 2023
The City of Philadelphia (the “City”) is issuing notice of a recent event that may impact the security of information related to certain individuals. We are providing information about the event, our response, and steps potentially affected individuals may take to better protect against the possibility of identity theft and fraud, should they feel it is appropriate to do so.
What Happened? On May 24, 2023, the City initially became aware of suspicious activity in its email environment. We launched an investigation, with the assistance of third-party cybersecurity specialists, to determine the nature and scope of the event. The investigation is ongoing. However, to date, the investigation determined that between May 26, 2023 and July 28, 2023, an unauthorized actor may have gained access to certain City email accounts and certain information contained therein. Also, on August 22, 2023, we became aware that the at-issue email accounts include email accounts that may contain protected health information.
In an abundance of caution, we are conducting a comprehensive, programmatic and manual review of the potentially impacted email accounts to determine whether personal information or protected health information was potentially affected. If so, the City will work to confirm the identities and contact information for potentially impacted individuals and provide notice via written letter.
Click for complete Notice of Privacy Incident – Oct. 20, 2023
