Suffolk Says Cyberattack May Have Exposed Personal Data
Summary
Suffolk says an investigation found an attempted ransomware attack that the city detected and blocked. Investigators have not confirmed whether data was accessed or obtained, but names and other personal information may have been exposed.
Key points
- CISA notified Suffolk on Feb. 25 that a malicious actor may have exfiltrated data from the city network.
- The city says investigators found an attempted ransomware attack and that the threat was detected and further access blocked.
- Investigators have not confirmed whether any information was accessed or obtained.
- The city says names and other personally identifiable information may have been seen or accessed.
- A service provider reviewed the systems and implemented stronger policies, according to the city.
- The incident was reported to the FBI Cyber Division and the Virginia Fusion Center.
Article Details
- Victim Organization
- City of Suffolk
- Incident Type
- Cybersecurity attack involving an attempted use of ransomware; possible data exfiltration was reported but not confirmed.
- Disclosure Date
- 2026-04-24
- Data Types Exposed
- Full names or first initial and last name
- Personally identifiable information
- Operational Impact
- The city detected the threat and blocked further access. No other operational impact was reported.
- Ransom Or Extortion
- Investigators found that the attacker attempted to use ransomware. No ransom demand or payment was reported.
- Claim Status
- confirmed