Lycoming County Data Breach Affects Subscriber Privacy

By Join The Case · Published December 10, 2025 · Updated December 10, 2025 · 6 min read

Dapeer Law, P.A., a top-rated class action law firm, is investigating the Lycoming County data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

See Featured Articles

Petco Data Breach Affects Subscriber Privacy

Were you hired to help train AI models?

Received a Parking Ticket Notice in the Mail from Parking Revenue Recovery Services?

The Washington Post Data Breach: SSNs Exposed

Late-Night and Early-Morning Unwanted Text Messages

Lycoming County Data Breach Lawsuit Investigation

Q: I received a data breach letter from Lycoming County — what should I do?

Follow the activation instructions in your letter to enroll in the complimentary Experian IdentityWorks membership, review your financial accounts for unauthorized activity, and report suspected identity theft to local law enforcement and the major credit bureaus.

Q: How do I submit a claim related to the Lycoming County data breach?

Impacted residents can speak with a data-breach attorney about potential claims for free. Save all communications from Lycoming County and any receipts related to identity-theft expenses.

Q: What information did the Lycoming County breach expose?

The Maine Attorney General filing states that personal information was involved, but Lycoming County did not publicly list the specific data elements in that notice.

Q: Did Lycoming County offer credit monitoring, and for how long?

Yes. The County is offering a complimentary Experian IdentityWorks membership that includes credit monitoring, identity restoration, and up to $1 million in identity-theft insurance. The letter did not specify the duration.

Q: How many people were affected by the Lycoming County breach?

As of December 10, 2025, Lycoming County had not disclosed the total number of impacted individuals in its public filings.

Q: How can I get the official breach notice (PDF) for Lycoming County?

You can download the Maine Attorney General filing directly from the link provided in this article under “Download Official Breach Notice (PDF).”

Lycoming County residents are now learning that ransomware actors accessed the County’s network in August 2025 and removed files containing sensitive personal data. If you received a notification letter, you may be entitled to free identity-protection services and potential compensation. Contact a qualified data-breach attorney to understand your legal options today.

At a Glance

Incident Type: Ransomware & data exfiltration
Network Access Period: August 11–12, 2025
Discovery Date: August 12, 2025
Consumer Notice Date: December 9, 2025
Credit-Monitoring Offered: Complimentary Experian IdentityWorks membership
Total Individuals Affected: Not yet disclosed

Download Official Breach Notice (PDF)

What Happened?

Lycoming County, Pennsylvania (“Lycoming County, Pennsylvania” (Lycoming County)) detected a ransomware attack on its computer network on August 12, 2025. An immediate investigation with nationally recognized cybersecurity and forensics consultants determined that cybercriminals accessed the network beginning August 11, 2025 and removed data before being contained.

The County completed a detailed data review on November 17, 2025 to identify the impacted information and the individuals whose data was involved. Written notices to residents were mailed starting December 9, 2025, more than three months after the incident.

Information Exposed

The Maine Attorney General filing states that the breach included “your [Extra1]”—a placeholder indicating personal information was affected. Lycoming County has not publicly enumerated the exact data elements. If you received a letter, carefully review the “What Information Was Involved” section to confirm what the attackers accessed.

Lycoming County’s Response

According to the notice, the County:

Engaged third-party cybersecurity and digital forensics specialists.
Alerted federal law-enforcement authorities and the Lycoming County District Attorney.
Posted an incident notice on its website and notified statewide media on August 27, 2025.
Enhanced security tools, deployed endpoint detection and response (EDR) on endpoints, required an enterprise-wide password reset, and tightened restrictions on external network access.
Is monitoring internet sources and, as of the notice date, found no evidence that the stolen data has been offered for sale.
Notified all appropriate state regulators.

Steps You Can Take Right Now

Lycoming County recommends several immediate actions:

Enroll in the complimentary Experian IdentityWorks membership using the activation code in your letter.
Stay vigilant by reviewing account statements and ordering free credit reports to spot unauthorized activity.
Report suspected identity theft to local law enforcement, your state Attorney General, and the major credit-bureaus.

Additional Safeguards

You can also place a fraud alert or credit freeze with Equifax, Experian, and TransUnion for extra protection. Instructions are provided at the end of the County’s notification letter.

Company Overview

Website: lyco.org
Headquarters: 48 West Third Street, Williamsport, PA, USA
Founded: 1795
Government Entity: County government serving residents of Lycoming County, Pennsylvania
Social Media: Facebook • X (Twitter) • LinkedIn • YouTube

Frequently Asked Questions

I received a data breach letter from Lycoming County — what should I do?

Activate the free Experian IdentityWorks membership, monitor your financial accounts, and report any suspicious activity to law enforcement and credit bureaus.

How do I submit a claim related to the Lycoming County data breach?

Save your notification letter and any out-of-pocket costs, then consult a data-breach attorney about participating in a potential lawsuit or settlement.

What information did the Lycoming County breach expose?

The public filing only notes that personal data was involved. Specific data types were not disclosed in the Maine notice.

Did Lycoming County offer credit monitoring, and for how long?

Yes. Impacted individuals receive complimentary Experian IdentityWorks services; the County did not specify the term length.

How many people were affected by the Lycoming County breach?

As of December 10, 2025, the County had not reported the total number of impacted individuals.

How can I get the official breach notice (PDF) for Lycoming County?

You can download it directly from the Maine Attorney General’s site using the button earlier in this article.

Privacy Choices