Pennsylvania Office of Attorney General Provides Notice of Data Incident; Says Compromised Info May Have Included Name, Social Security Number, And/ Or Medical Info; Says Has No Evidence Of Misuse, Or Attempted Misuse, Of Information That Was Potentially Involved In Data Incident

Author: Benzinga Newsdesk | November 14, 2025 03:14pm

As previously reported by the Pennsylvania Office of the Attorney General ("OAG"), the OAG experienced a data security incident earlier this year. The OAG has recently learned that the incident may have involved unauthorized access to personal information.

The OAG initially detected the incident within its network on August 9, 2025. Upon discovery, the OAG promptly initiated an investigation of the matter and engaged cybersecurity specialists to assist with the incident response. The OAG later learned that certain files may have been accessed without authorization. The OAG reviewed which data may have been involved and learned that certain personal information was contained in some files. Again, the OAG has no evidence of the misuse, or attempted misuse, of any information that was potentially involved.

Based on the OAG's review of the data involved, for some individuals the information involved may have included name, Social Security number, and/or medical information.

Posted In: SPY