"Personal Information of 123K Individuals Exposed in City of Tucson Data Breach"
The City of Tucson, Arizona, is notifying roughly 123,000 individuals that their personal information was compromised in a recent data breach. The data breach was identified at the end of May 2022, but the city concluded its investigation only last month. The city says that the incident resulted from compromised network account credentials that allowed the attackers to access files containing the personal information of some individuals. The exposed data included name, Social Security number, driver’s license number, state identification number, and passport number. While the city says it has no evidence that the exposed information has been misused, such data is often sold on dark web portals or used for phishing, identity theft, and other types of attacks. The city noted that it was able to contain and remediate the breach soon after identifying it and that it is also implementing additional measures to improve its cybersecurity.