ENKR

Jefferson County Health Department (Missouri) ransomware data breach (2022)

Add to my breach check

115,940 people

What leaked7

Hard to replace

  • Driver's licence number
  • Home or delivery address
  • Other profile data

Permanent

  • Health information
  • Social Security number
  • Date of birth
  • Full name
  • Health informationdiagnoses, lab results, medications and other treatment information
  • Other profile dataclaims and financial information

To-dos6 · about 1 h 30 min in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name (opens in a new tab)
  2. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  3. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name (opens in a new tab)
  4. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name (opens in a new tab)
  5. Turn on instant transaction alertsabout 5 minHelps you notice: bank account fraud
  6. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)

What happened next7 events

  1. Undetected 2 events15 days · show events
  2. Response 1 eventNo individual notice on record · show events
  3. Remedy 1 eventUntil November 16, 2026 · show events
  4. PenaltyNone on record
  5. Disputes 3 eventsOngoing · show events
  1. Settlement claims, opt-outs and objections open until November 16, 2026; fairness hearing on December 10, 2026Until November 16, 2026
  2. Preliminary approval of a 2.25 million USD class settlement: a 150 USD cash payment or up to 300 USD for documented losses and lost time
  3. Court granted class certification
  4. Class action filed in the Circuit Court of Jefferson County, Missouri
  5. Breach report to HHS: a ransomware incident affecting 115,940 people; HHS notes that the health department also notified the media, published a substitute notice and offered free credit monitoring
  6. Unauthorized access between October 31, 2022 and November 15, 2022 was discovered on or about November 15, 2022
  7. Intrusion began
Company
Jefferson County Health Department · Missouri
When it happened
–
Company detected it
Notice
Leak confirmed
Affected
115,940 people · the health department's report to HHS

Sources