Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Delaware County says systems restored after June intrusion; data access under review
Summary
Executive Director Barbara O'Malley told council the county restored operations after a June 26 cyber intrusion, has engaged federal law enforcement and cybersecurity firms, and will notify individuals if forensic review shows personal data were exposed.
Delaware County officials told the County Council on Aug. 19 that county information systems were restored after a cyber intrusion discovered on June 26, 2026, and that forensic investigators found evidence the attackers gained remote access to some data.
"We discovered the activity when our managed detection and response service began receiving alerts," Executive Director Barbara O'Malley said in the council meeting. O'Malley said the county took its network offline to verify security, used secure backups to restore systems, and coordinated with state and federal law enforcement and privacy counsel.
O'Malley said the county's investigation to date found no evidence of unauthorized access to county e-mail or of phishing campaigns tied to the event. She said the county has engaged cybersecurity specialists and is continuing a forensic review to determine which types of data were accessed.
"We are still reviewing to determine the types of data that were accessed and will notify any applicable individuals, as required by Pennsylvania law," she said. The county also said it will follow guidance from insurers and privacy attorneys on what details are safe to release publicly to avoid creating further vulnerability.
At the public comment portion of the meeting, resident Kathy Buckley urged the county to be more specific about what was lost or exposed, saying residents do not know whether Social Security numbers, voting information or other personal data were accessed. O'Malley repeated that the county will notify individuals if the review determines their personal information was disclosed and said the county will provide more information when it can without increasing security risks.
Council members and the administration said upgrades since 2020—including endpoint detection tools—were critical to the successful restoration and reduced the need to use outside decryption tools. The county said it will continue implementing additional security measures and report back when the review is complete.
AI generated
The text on this page is AI generated. Summaries, highlights, analysis, and video transcripts are all produced from the original source material.
AI can make mistakes, so if you spot one, and we will fix it for everyone.
Note: the source content is unaltered by us. Any content source we link to, be it a video, an audio recording, or a document, is presented exactly as its publisher released it. That publisher is usually a government body, sometimes an individual official or another organisation.
