Philadelphia released a notice regarding a cybersecurity incident. The city became aware of suspicious email activity in May of 2023. An investigation determined that between May 26, 2023 and July 28, 2023, an unauthorized actor may have gained access to certain city email accounts. 

In August of 2023, the city became aware that the at-issue email accounts include email accounts that may contain protected health information. The city is working to confirm identities and contact information for affected individuals. 

Types of information impacted could include:

  • Demographic information, such as name, address, date of birth, Social Security Number and other contact information.
  • Medical information, such as diagnosis and other treatment related information.
  • Limited financial information, such as claims information.