The incident was identified at the end of May 2022, but the city concluded its investigation only last month.

In a data breach notice on its website, the city says that the incident was the result of compromised network account credentials that allowed the attackers to access files containing the personal information of some individuals.

The exposed data included name, Social Security number, driver’s license number, state identification number, and passport number.