Pennsylvania Office of Attorney General hit by ransomware attack linked to INC Ransom
Incident
Summary
Hide ▲
Show ▼
Pennsylvania's Office of the Attorney General confirmed a ransomware attack that disrupted its website, email, and phone systems and raised concern that files were accessed without authorization. The breach began in August 2025 and was later tied to INC Ransom's leak-site claim. The office said some affected files may have contained names, Social Security numbers, and medical information, increasing the potential harm to impacted individuals.
Related Happenings
Marquis data breach exposing 672,075 people's personal and financial information
Data Leak
First: 18.03.2026 17:32
Last: 18.03.2026 17:32
Sources 1
About this happening:
Marquis disclosed a **data breach** that exposed personal and financial records tied to **672,075 people**, increasing the risk of identity theft and account fraud. The stolen inf...
Marquis data breach exposing 672,075 people's personal and financial information
Data LeakAbout this happening: Marquis disclosed a **data breach** that exposed personal and financial records tied to **672,075 people**, increasing the risk of identity theft and account fraud. The stolen inf...
Marquis Software Solutions hit by ransomware attack
Incident
First: 29.01.2026 19:57
Last: 29.01.2026 19:57
Sources 1
About this happening:
**Marquis Software Solutions** disclosed that its **August 14, 2025** ransomware attack exposed personal data tied to **74 U.S. banks and credit unions** and affected **over 400,0...
Marquis Software Solutions hit by ransomware attack
IncidentAbout this happening: **Marquis Software Solutions** disclosed that its **August 14, 2025** ransomware attack exposed personal data tied to **74 U.S. banks and credit unions** and affected **over 400,0...
Latest development: 18.03.2026 17:32
Marquis, a Texas-based financial services provider, disclosed that a ransomware gang stole personal and financial data from 672,075 people after an August 14, 2025 attack on a compromised SonicWall firewall, and the incident disrupted operations at 74 banks across the United States; breach notifications were filed in early December, and affected files were reviewed on December 10, 2025.
OnSolve CodeRED user data theft and sale claim
Data Leak
First: 26.11.2025 18:15
Last: 26.11.2025 18:15
Sources 1
About this happening:
The **OnSolve CodeRED** data theft is escalating into a **for-sale leak** claim, raising the risk that **names, addresses, email addresses, phone numbers, and passwords** will spr...
OnSolve CodeRED user data theft and sale claim
Data LeakAbout this happening: The **OnSolve CodeRED** data theft is escalating into a **for-sale leak** claim, raising the risk that **names, addresses, email addresses, phone numbers, and passwords** will spr...
Timeline
-
17.11.2025 17:57 2 articles · 6mo ago
Pennsylvania OAG systems and services disrupted
Victim Impact UpdateOn August 9, 2025, the ransomware intrusion took down Pennsylvania Office of the Attorney General systems and services, including the office website, employees' email accounts, and landline phone lines, creating widespread and crippling disruption.
Show sources
- Pennsylvania AG confirms data breach after INC Ransom attack — www.bleepingcomputer.com — 17.11.2025 17:57
- Pennsylvania Attorney General Confirms Ransomware Behind Weeks-Long Outage — www.securityweek.com — 03.09.2025 14:29
-
17.11.2025 17:57 1 articles · 6mo ago
INC Ransom claims the Pennsylvania OAG breach
Attribution UpdateOn September 20, 2025, INC Ransom added the Pennsylvania Office of the Attorney General breach to its dark web leak site and claimed to have stolen 5.7TB of files, including access to an FBI internal network.
Show sources
- Pennsylvania AG confirms data breach after INC Ransom attack — www.bleepingcomputer.com — 17.11.2025 17:57
-
17.11.2025 17:57 2 articles · 6mo ago
Pennsylvania OAG confirms unauthorized access to files
Victim Impact UpdateA Friday press release from the Pennsylvania Office of the Attorney General confirmed that certain files may have been accessed without authorization and that, for some individuals, the information involved may have included names, Social Security numbers, and medical information.
Show sources
- Pennsylvania AG confirms data breach after INC Ransom attack — www.bleepingcomputer.com — 17.11.2025 17:57
- Pennsylvania AG confirms data breach after INC Ransom attack — www.bleepingcomputer.com — 17.11.2025 17:57