Syracuse Police Department Data Breach Exposes Thousands of Records, Costs Taxpayers $250K In early 2025, the Syracuse Police Department (SPD) discovered a data breach affecting digital files containing personal information, including Social Security numbers, spanning several decades. The incident, detected on January 11, 2025, prompted the department to shut down its IT systems to contain the breach, which involved unauthorized access to files between January 10 and 12. An investigation by cybersecurity and forensic specialists revealed that sensitive data was "accessed or acquired without authorization." While city officials have not disclosed the exact number of affected individuals or the full scope of compromised data, sources familiar with a briefing to the Syracuse Common Council estimated that up to 15,000 people named in records dating back to the 1980s may have been impacted. In late March, the city began notifying potential victims via letters sent through cybersecurity firm IDX, offering 12 months of free credit monitoring and identity protection. The letters, which include a QR code and online sign-up link, were sent from a California-based IDX post office box. City spokesperson Sol Muñoz confirmed that no confirmed cases of exposed information have been identified but stated the notifications were issued "out of an abundance of caution." The total cost to taxpayers for the response reached $250,000, covering the city’s cybersecurity insurance deductible. Insurance will cover additional expenses, including mailings and credit monitoring for those who enroll. The breach reflects a broader trend of cyberattacks shifting toward targeted, high-value data sources, with the Identity Theft Resource Center reporting 278.9 million victim notices issued in the U.S. in 2025 a 79% decrease from 2024, attributed to attackers favoring precision over mass breaches.