ENKR

Pierce County Library System patron and employee data breach

Add to my breach check

Made public · 340,101 people

What leaked8

Hard to replace

  • Driver's licence number
  • Passport number
  • Bank account number
  • Other profile data

Permanent

  • Health information
  • Social Security number
  • Date of birth
  • Full name
  • Health informationmedical information; current or former employees and their family members
  • Social Security numbercurrent or former employees and their family members
  • Driver's licence numbercurrent or former employees and their family members
  • Passport numbercurrent or former employees and their family members
  • Bank account numberfinancial account information; current or former employees and their family members
  • Other profile datahealth insurance information, and credit card information · details not stated; current or former employees and their family members

To-dos6 · about 1 h 30 min in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name · Limits harm from: applications with your ID (opens in a new tab)
  2. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  3. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name, applications with your ID (opens in a new tab)
  4. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name, applications with your ID (opens in a new tab)
  5. Turn on instant transaction alertsabout 5 minHelps you notice: bank account fraud
  6. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)

What happened next7 events

  1. Undetected 2 events6 days · show events
  2. Response 4 eventsNotice in 79 days · show events
  3. Remedy 1 eventOngoing · show events
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Offered one year of free credit monitoring through IDX to people whose personal information was potentially affected
  2. Mailed letters about the data of current and former employees and their family members, after a review that ended on 10 October 2025
  3. Sent letters to library card holders
  4. Notified the Washington attorney general; the directory lists 336,826 Washington residents and names and full dates of birth
  5. Confirmed that it was the target of a cybersecurity event and that some library data was taken; details were still under investigation · press
  6. Discovered the cybersecurity incident and shut down all its systems · press
  7. Intrusion began
Company
Pierce County Library System
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
340,101 people · Pierce County Library System's filing with the Maine attorney general, as SecurityWeek reports; press

Sources