Catawba County Cyberattack Exposes Sensitive Data of 128,000 Residents
In September 2025, Catawba County, North Carolina, suffered a cyberattack that potentially compromised the personal and financial information of current and former residents. The breach, detected on September 19, may have exposed full names, dates of birth, Social Security numbers, financial account details, medical records, and health insurance information. Unauthorized access likely occurred between September 12 and 19, though the county reported no evidence of data misuse.
Authorities confirmed that 128,000 letters were sent to affected individuals or their descendants. Unlike many ransomware incidents, Catawba County did not pay a ransom, as North Carolina law prohibits state and local governments from engaging with or compensating cybercriminals. The financial impact was mitigated by the county’s cybersecurity insurance, which covered all costs except a $50,000 deductible.
While emergency systems remained uncompromised, the county has since strengthened its data security measures. Affected residents were offered complimentary credit monitoring and access to a toll-free helpline (866-898-7846) for further details. The incident reflects the growing threat of cyberattacks on public institutions, even those with advanced IT infrastructure.
Source: https://www.govtech.com/security/no-ransom-paid-in-2025-catawba-county-n-c-cyber-incident
Catawba County Government cybersecurity rating report: https://www.rankiteo.com/company/catawba-county-nc
"id": "CAT1790979858",
"linkid": "catawba-county-nc",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '128000',
'industry': 'Public Sector',
'location': 'North Carolina, USA',
'name': 'Catawba County',
'type': 'Government'}],
'customer_advisories': 'Affected residents were offered complimentary credit '
'monitoring and access to a toll-free helpline '
'(866-898-7846).',
'data_breach': {'number_of_records_exposed': '128000',
'personally_identifiable_information': ['Full names',
'Dates of birth',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Financial information',
'Medical records',
'Health insurance information']},
'date_detected': '2025-09-19',
'description': 'In September 2025, Catawba County, North Carolina, suffered a '
'cyberattack that potentially compromised the personal and '
'financial information of current and former residents. The '
'breach may have exposed full names, dates of birth, Social '
'Security numbers, financial account details, medical records, '
'and health insurance information. Unauthorized access likely '
'occurred between September 12 and 19, though the county '
'reported no evidence of data misuse.',
'impact': {'data_compromised': 'Personal and financial information, including '
'full names, dates of birth, Social Security '
'numbers, financial account details, medical '
'records, and health insurance information',
'financial_loss': '50000',
'identity_theft_risk': 'High',
'operational_impact': 'Emergency systems remained uncompromised',
'payment_information_risk': 'High'},
'lessons_learned': 'The incident reflects the growing threat of cyberattacks '
'on public institutions, even those with advanced IT '
'infrastructure.',
'post_incident_analysis': {'corrective_actions': 'Strengthened data security '
'measures'},
'ransomware': {'ransom_paid': 'No'},
'references': [{'source': 'Incident Description'}],
'response': {'communication_strategy': 'Sent letters to affected individuals, '
'offered complimentary credit '
'monitoring, and provided a toll-free '
'helpline (866-898-7846)',
'remediation_measures': 'Strengthened data security measures'},
'title': 'Catawba County Cyberattack Exposes Sensitive Data of 128,000 '
'Residents',
'type': 'Data Breach'}