Find notable cyber news and cases, enriched with sources, timelines, and signals.

Pennsylvania Office of Attorney General hit by ransomware attack linked to INC Ransom

Incident
First reported
Last updated
Happening score
H score 50
2 unique sources, 2 articles

Summary

Hide ▲

Pennsylvania's Office of the Attorney General confirmed a ransomware attack that disrupted its website, email, and phone systems and raised concern that files were accessed without authorization. The breach began in August 2025 and was later tied to INC Ransom's leak-site claim. The office said some affected files may have contained names, Social Security numbers, and medical information, increasing the potential harm to impacted individuals.

Related Happenings

Marquis data breach exposing 672,075 people's personal and financial information

Data Leak
First: 18.03.2026 17:32 Last: 18.03.2026 17:32 Sources 1

About this happening: Marquis disclosed a **data breach** that exposed personal and financial records tied to **672,075 people**, increasing the risk of identity theft and account fraud. The stolen inf...

Marquis Software Solutions hit by ransomware attack

Incident
First: 29.01.2026 19:57 Last: 29.01.2026 19:57 Sources 1

About this happening: **Marquis Software Solutions** disclosed that its **August 14, 2025** ransomware attack exposed personal data tied to **74 U.S. banks and credit unions** and affected **over 400,0...

Latest development: 18.03.2026 17:32

Marquis, a Texas-based financial services provider, disclosed that a ransomware gang stole personal and financial data from 672,075 people after an August 14, 2025 attack on a compromised SonicWall firewall, and the incident disrupted operations at 74 banks across the United States; breach notifications were filed in early December, and affected files were reviewed on December 10, 2025.

OnSolve CodeRED user data theft and sale claim

Data Leak
First: 26.11.2025 18:15 Last: 26.11.2025 18:15 Sources 1

About this happening: The **OnSolve CodeRED** data theft is escalating into a **for-sale leak** claim, raising the risk that **names, addresses, email addresses, phone numbers, and passwords** will spr...

Timeline

  1. 17.11.2025 17:57 2 articles · 6mo ago

    Pennsylvania OAG systems and services disrupted

    Victim Impact Update

    On August 9, 2025, the ransomware intrusion took down Pennsylvania Office of the Attorney General systems and services, including the office website, employees' email accounts, and landline phone lines, creating widespread and crippling disruption.

    Show sources
  2. 17.11.2025 17:57 1 articles · 6mo ago

    INC Ransom claims the Pennsylvania OAG breach

    Attribution Update

    On September 20, 2025, INC Ransom added the Pennsylvania Office of the Attorney General breach to its dark web leak site and claimed to have stolen 5.7TB of files, including access to an FBI internal network.

    Show sources
  3. 17.11.2025 17:57 2 articles · 6mo ago

    Pennsylvania OAG confirms unauthorized access to files

    Victim Impact Update

    A Friday press release from the Pennsylvania Office of the Attorney General confirmed that certain files may have been accessed without authorization and that, for some individuals, the information involved may have included names, Social Security numbers, and medical information.

    Show sources