The Pierce County Library System confirmed a data breach in April 2025 that compromised names and dates of birth of 336,826 people. The cyber attack disrupted many library services, including access to the library catalog, self-checkout, applications for library cards, printing, and access to library computers. Ransomware gang Inc took credit for the breach, claiming to have stolen 1.94 TB of data, including driver’s licenses, passports, and internal library documents. The attack involved ransomware, and the investigation determined unauthorized access to PCLS’ environment between April 15 and April 21, 2025. PCLS is offering eligible victims one year of free credit monitoring through IDX.
Source: https://www.comparitech.com/news/pierce-county-wa-libraries-notify-336k-people-of-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/pierceco-library-system
"id": "pie352071125",
"linkid": "pierceco-library-system",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'customers_affected': '336,826',
'industry': 'Education',
'location': 'Pierce County, Washington',
'name': 'Pierce County Library System',
'size': '19 libraries and an online catalog',
'type': 'Public Library'}],
'attack_vector': ['Spear Phishing',
'Exploiting known vulnerabilities in software'],
'customer_advisories': 'Public notification and offering free credit '
'monitoring',
'data_breach': {'data_exfiltration': '1.94 TB',
'file_types_exposed': ['Images', 'Documents'],
'number_of_records_exposed': '336,826',
'personally_identifiable_information': ['Names',
'Dates of Birth',
'Driver’s Licenses',
'Passports'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Dates of Birth',
'Driver’s Licenses',
'Passports',
'Internal Library Documents']},
'date_detected': 'April 2025',
'date_publicly_disclosed': 'May 2025',
'description': 'A data breach occurred at the Pierce County Library System in '
'April 2025, compromising names and dates of birth of 336,826 '
'individuals. The breach disrupted many library services and '
'was claimed by the Inc ransomware gang, which stole 1.94 TB '
'of data.',
'impact': {'data_compromised': ['Names',
'Dates of Birth',
'Driver’s Licenses',
'Passports',
'Internal Library Documents'],
'downtime': 'April and May 2025',
'operational_impact': 'Disruption of library services',
'systems_affected': ['Library Catalog',
'Self-Checkout',
'Library Card Applications',
'Printing',
'Library Computers']},
'investigation_status': 'Ongoing',
'motivation': 'Financial Gain',
'ransomware': {'data_exfiltration': '1.94 TB', 'ransomware_strain': 'Inc'},
'references': [{'source': 'Comparitech'}],
'response': {'communication_strategy': 'Public notification and offering free '
'credit monitoring',
'third_party_assistance': 'IDX for free credit monitoring'},
'stakeholder_advisories': 'Public notification and offering free credit '
'monitoring',
'threat_actor': 'Inc Ransomware',
'title': 'Pierce County Library System Data Breach',
'type': 'Ransomware'}