Data Breach Notifications

Entity Information

  • Type of Organization: Other Government Entity
  • Entity Name: City of Philadelphia
  • Street Address: 1515 Arch Street, 15th Floor
  • City: Philadelphia
  • State, or Country if outside the US: Pennsylvania
  • Zip Code: 19102-1595

Submitted By

  • Name: Julie Assis
  • Title: Chief Deputy Solicitor, HIPAA & Privacy Law Unit / City HIPAA Privacy Officer
  • Firm name (if different than entity):
  • Telephone Number: 215-531-2569
  • Email Address: HIPAAprivacy@phila.gov
  • Relationship to entity whose information was compromised: Employee

Breach Information

  • Total number of persons affected (including residents): 108,214
  • Total number of Maine residents affected: 4
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 03/11/2020
  • Date Breach Discovered: 07/12/2021
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 08/06/2021
  • Copy of notice to affected Maine residents: City of Philadelphia - Supplemental Exhibit 1 - ME.pdf
  • Date of any previous (within 12 months) breach notifications: August 3, 2020; February 5, 2021; April 14, 2021; June 11, 2021; All previous notifications listed above related to the incident reported in this form. However, no Maine residents were identified as potentially impacted until the June 11, 2021 round of notification.
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 12 months; Kroll; Credit monitoring and identity restoration services