Syracuse Police Department Data Breach Exposes Thousands of Records, Costs Taxpayers $250K
In early 2025, the Syracuse Police Department (SPD) discovered a data breach affecting digital files containing personal information, including Social Security numbers, spanning several decades. The incident, detected on January 11, 2025, prompted the department to shut down its IT systems to contain the breach, which involved unauthorized access to files between January 10 and 12.
An investigation by cybersecurity and forensic specialists revealed that sensitive data was "accessed or acquired without authorization." While city officials have not disclosed the exact number of affected individuals or the full scope of compromised data, sources familiar with a briefing to the Syracuse Common Council estimated that up to 15,000 people named in records dating back to the 1980s may have been impacted.
In late March, the city began notifying potential victims via letters sent through cybersecurity firm IDX, offering 12 months of free credit monitoring and identity protection. The letters, which include a QR code and online sign-up link, were sent from a California-based IDX post office box. City spokesperson Sol Muñoz confirmed that no confirmed cases of exposed information have been identified but stated the notifications were issued "out of an abundance of caution."
The total cost to taxpayers for the response reached $250,000, covering the city’s cybersecurity insurance deductible. Insurance will cover additional expenses, including mailings and credit monitoring for those who enroll.
The breach reflects a broader trend of cyberattacks shifting toward targeted, high-value data sources, with the Identity Theft Resource Center reporting 278.9 million victim notices issued in the U.S. in 2025 a 79% decrease from 2024, attributed to attackers favoring precision over mass breaches.
Source: https://www.govtech.com/security/syracuse-n-y-notifies-possible-police-data-breach-victims
Syracuse Police Department cybersecurity rating report: https://www.rankiteo.com/company/syracuse-police-department
"id": "SYR1775601101",
"linkid": "syracuse-police-department",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Up to 15,000 individuals',
'industry': 'Law Enforcement',
'location': 'Syracuse, New York, USA',
'name': 'Syracuse Police Department',
'type': 'Government Agency'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Letters sent to potential victims with credit '
'monitoring offer',
'data_breach': {'number_of_records_exposed': 'Up to 15,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Social Security numbers']},
'date_detected': '2025-01-11',
'description': 'In early 2025, the Syracuse Police Department (SPD) '
'discovered a data breach affecting digital files containing '
'personal information, including Social Security numbers, '
'spanning several decades. The incident involved unauthorized '
'access to files between January 10 and 12, 2025, prompting '
'the department to shut down its IT systems to contain the '
'breach.',
'impact': {'data_compromised': 'Personal information, including Social '
'Security numbers',
'financial_loss': '$250,000 (insurance deductible)',
'identity_theft_risk': 'High (due to exposure of Social Security '
'numbers)',
'operational_impact': 'IT systems shut down for containment',
'systems_affected': 'SPD IT systems'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Syracuse Police Department Briefing to Common '
'Council'}],
'response': {'communication_strategy': 'Letters sent via IDX with QR code and '
'online sign-up link',
'containment_measures': 'IT systems shut down',
'remediation_measures': 'Notification letters sent, credit '
'monitoring offered',
'third_party_assistance': 'Cybersecurity and forensic '
'specialists, IDX (credit monitoring)'},
'title': 'Syracuse Police Department Data Breach Exposes Thousands of Records',
'type': 'Data Breach'}