City of Philadelphia says over 35,000 hit in May 2023 breach

The City of Philadelphia disclosed an email-account compromise affecting 35,881 individuals whose personal and protected health information (including Social Security numbers, demographic data, medical records, and limited financial/claims information) was exposed after attackers accessed multiple municipal email accounts between May 26 and July 28, 2023; affected people have been notified and offered 12 months of credit monitoring while the city works with law enforcement and improves safeguards.