Newport This Week

City Concludes Investigation into Privacy Incident


City of Newport Updated Notice of Privacy Incident

City Concludes Investigation into Privacy Incident

 

NEWPORT, R.I. (MONDAY, AUGUST 15h, 2022) – The City of Newport announced today that it has concluded the investigation of a previously announced security incident.

As previously announced, on June 9, 2022, the City identified unusual network activity that caused certain systems in its network to become unavailable. The City immediately took steps to secure its network and launch an investigation with the assistance of a cybersecurity firm. The City also notified law enforcement and worked to support its investigation.

Through the investigation, the City learned that there was unauthorized activity in its network between June 8, 2022 and June 9, 2022. During that time, an unauthorized party obtained files stored on the City’s file servers.

After its prior announcement, the City continued to carefully review the files involved and determined, on July 22, 2022, the files involved included historical property and motor vehicle registration records, as well as City department reports and financial records.

Some of these files included the names, dates of birth, Social Security numbers, driver’s license or state identification numbers, financial account information, payment card information, health insurance information, and medical information of City residents and others.

On July 22, 2022 and August 15, 2022, the City mailed letters to individuals whose information was identified in the files. The City has also established a dedicated, toll-free call center to answer questions that individuals may have about the incident.

The City is offering complimentary credit monitoring and identity protection services to individuals whose information Social Security number or driver’s license was involved. The City also recommends that the individuals involved review statements they receive from their health insurers and financial institutions. If they see charges for services not received or other unauthorized activity, they should contact the appropriate insurer or financial institution immediately.

The City takes this matter very seriously and regrets any inconvenience or concern this incident may cause. To help prevent something like this from happening again, the City is taking steps to further enhance the security of its network.

Additional information can be obtained by calling 855-516-3873, Monday through Friday, from 9:00 a.m. to 6:30 p.m. Eastern Time.

One response to “City Concludes Investigation into Privacy Incident”

  1. A very concerned Newport Citizen says:

    The breadth and scope of this breach is incomprehensible and a complete abandonment of even the most basic of security protocols when it comes to protecting personally identifiable information. The citizens of the City of Newport are owed a complete and unedited copy of the report by the “security firm” retained to audit. If you aren’t familiar with computer security, a breach of this magnitude is akin to the mayor leaving every door and file drawer in city hall open to thieves since the start of online record keeping by the city. In particular, it’s worth asking and having the question publicly answered as to whether the city was ransomed for the data and if so, how much was paid. If they didn’t maintain insurance for this purpose, then if a ransom was paid it should be a matter of public record what the cost to the tax payers is, including the fees from the security auditing firm. Incompetence of the highest order is clearly in action at Newport City Hall when it comes to information security and protection.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.