Union County, Ohio, Confirms Data Breach Affecting 45,587 Individuals in May Ransomware Attack
Officials in Ohio’s Union County have disclosed that a May ransomware attack compromised sensitive data belonging to 45,587 individuals, including residents and county employees. The breach, which remains unclaimed by any known threat group, exposed a wide range of personal information, such as Social Security numbers, financial account details, driver’s license numbers, medical records, fingerprint data, and passport numbers. The county notified affected individuals via breach notification letters.
The incident is part of a broader surge in cyberattacks targeting state and local governments this year. In June, the town of Waxhaw, North Carolina, confirmed a ransomware attack by the Qilin gang, which resulted in the theft of over 600 GB of data. Other recent victims include Lorain County, Ohio, and the Maryland state government, highlighting persistent vulnerabilities in public sector cybersecurity.
Source: https://www.scworld.com/brief/over-45k-hit-by-ransomware-attack-against-ohio-county
Lorain County TPRM report: https://www.rankiteo.com/company/lorain-county-government
Waxhaw TPRM report: https://www.rankiteo.com/company/town-of-waxhaw
Maryland state government TPRM report: https://www.rankiteo.com/company/maryland-department-of-information-technology
"id": "lortowmar1768395786",
"linkid": "lorain-county-government, town-of-waxhaw, maryland-department-of-information-technology",
"type": "Cyber Attack",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '45,587 individuals',
'industry': 'Public Sector',
'location': 'Ohio, USA',
'name': 'Union County',
'type': 'Government'}],
'customer_advisories': 'Breach notification letters sent to affected '
'individuals',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '45,587',
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers',
"Driver's License "
'Numbers',
'Fingerprint Data',
'Passport Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial Account Details',
'Medical Information',
'Biometric Data',
'Passport Numbers']},
'date_detected': '2024-05',
'description': 'A ransomware attack on Union County, Ohio, resulted in the '
'compromise of data from 45,587 individuals. The attack has '
'not been claimed by any known threat operation. The stolen '
'data includes names, Social Security numbers, financial '
"account details, driver's license numbers, medical "
'information, fingerprint data, and passport numbers.',
'impact': {'data_compromised': '45,587 records',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': 'The Record by Recorded Future'}],
'response': {'communication_strategy': 'Breach notification letters sent to '
'affected individuals'},
'title': 'Union County Ransomware Attack',
'type': 'Ransomware'}