Ransomware attack on Ohio county impacts over 45,000 residents, employees

Ransomware was detected on May 18 in Union County, Ohio, and attackers exfiltrated sensitive personal and financial data for 45,487 residents and employees — including SSNs, driver’s license numbers, financial information, medical and passport data, and fingerprints; the county has hired cybersecurity experts and notified law enforcement but has not found public evidence the stolen information was posted or sold. The report frames this event as part of a broader 2025 wave of ransomware incidents against state and local governments and references other regional breaches, including one recently claimed by the Qilin ransomware group.