More than 340,000 impacted by cyberattack on library in large Washington county

Article Meta

Article Date: 2025-12-12T19:05:25+00:00
Article URL: https://therecord.media/over-340000-impacted-washington-state-library-hack
Article Image: https://cms.therecord.media/uploads/format_webp/DSC_0283_1_a6f4e4e315.jpg

Summary

A cyberattack on the Pierce County Library System in Washington has exposed personal information for more than 340,000 people. The breach was discovered on 21 April and forced the library to shut down its systems; investigators found attacker access between 15 and 21 April. The library serves a county of nearly 1 million and operates 19 branches.

The stolen data varied by group: library patrons had names and dates of birth leaked, while current and former employees suffered far worse exposure — including Social Security numbers, bank and credit card details, driver’s licence and passport numbers, health insurance and medical information. The INC ransomware gang claimed responsibility; the group has targeted other US government-related systems in 2025.

Key Points

Discovery and outage: Incident discovered 21 April; systems were taken offline for investigation.
Scope: More than 340,000 people impacted across a county population approaching 1 million.
Timeline: Attackers had access between 15–21 April, according to the investigation.
Data exposed: Patrons — names and dates of birth; employees/former employees — SSNs, financial and ID documents, medical and insurance records.
Attribution: The INC ransomware gang claimed the attack; the group has hit other government entities this year.
Broader trend: Libraries remain attractive ransomware targets because outages disrupt public access and may pressure payments; US officials have discussed programmes to help libraries improve cyber defences.

Why should I read this?

Heads up — if you’ve used Pierce County Library recently, your data might be in the mix. This isn’t just a local IT hiccup: employee Social Security numbers and medical info were reportedly taken. It’s worth checking breach notices, monitoring financial accounts and taking any identity-protection steps the library recommends.

Context and relevance

This incident highlights a persistent pattern: public libraries are increasingly targeted by ransomware gangs because service outages hit communities hard. The breach underscores the risks for local government services that hold both patron and staff data, and it adds urgency to calls for targeted cyber-defence support for libraries and other municipal systems.

For security teams and local officials, the attack is a reminder to review incident response plans, data minimisation policies and staff protection measures (eg credit monitoring for affected employees). For residents, it emphasises the practical need to watch for notifications, freeze credit if necessary and use identity-theft safeguards.

Source

Source: https://therecord.media/over-340000-impacted-washington-state-library-hack