Data Breach Notifications

Entity Information

  • Type of Organization: Other Government Entity
  • Entity Name: Baltimore County, Maryland
  • Street Address: 400 Washington Ave
  • City: Townson
  • State, or Country if outside the US: United States
  • Zip Code: 21204

Submitted By

  • Name: Karla Ballesteros
  • Title: Ms.
  • Firm name (if different than entity): Troutman Pepper
  • Telephone Number: 9496222415
  • Email Address: karla.ballesteros@troutman.com
  • Relationship to entity whose information was compromised: Legal Counsel

Breach Information

  • Total number of persons affected (including residents): 14846
  • Total number of Maine residents affected: 6
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 05/29/23 - 05/30/23
  • Date Breach Discovered: 06/16/23
  • Description of the Breach:
    • External system breach (hacking), Other
    • If other, please specify: This incident impacted Baltimore County's third-party service provider, Pension Benefit Information ("PBI"). Based on the information provided by PBI, on or around May 31, 2023, Progress Software, the provider of MOVEit Transfer software disclosed a vulnerability in their software that had been exploited by an unauthorized third party.PBI utilizes MOVEit in the regular course of our business operations to securely transfer files. PBI promptly launched an investigation into the nature and scope of the MOVEit vulnerability’s impact on its systems. Through the investigation, PBI learned that the third party accessed one of its MOVEit Transfer servers on May 29, 2023 and May 30, 2023 and downloaded data. PBI then conducted a manual review of its records to confirm the identities of individuals potentially affected by this event and their contact information to provide notifications.
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 08/10/23
  • Copy of notice to affected Maine residents: PBI - Individual Notice Template (Consumers).docx
  • Date of any previous (within 12 months) breach notifications: N/A
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: PBI is providing affected individuals access to complimentary credit monitoring and identity restoration services through Kroll/Experian. These services include fraud consultation and identity theft restoration services at no cost to individuals. PBI will be providing mailed notices to impacted individuals with information about these services along with activation instructions. Individuals will be offered 12/24 months of credit monitoring services.