York County experienced an unauthorized access incident in September 2024, where a county email account was compromised for a limited time. While the investigation confirmed that no data was explicitly viewed or stolen, sensitive personal information—including names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical and health insurance details, and online account credentials—was potentially accessible. The county initiated an investigation upon detecting suspicious email activity, notified affected individuals via written notices, and reported the event to regulatory authorities. Additional security measures, including administrative and technical safeguards, were implemented to prevent future breaches. A dedicated assistance line and mailing address were provided for inquiries, emphasizing the county’s commitment to transparency and data protection.