Hendersonville city employees target of cybersecurity breach

A Hendersonville cybersecurity incident has put city employees’ data at risk. The incident occurred just before the Thanksgiving break, according to a Nov. 29 statement from City Manager John Connet.

Connet said that a "threat actor group" targeted software used to manage city employee data.

Hendersonville is working with the North Carolina Joint Cybersecurity Task Force and other government agencies to investigate the incident. It is also working with a third-party contractor to assess what happened.

Hendersonville City Hall
Hendersonville City Hall

“We are taking this matter very seriously and continue to take significant measures to protect the information in our control,” Connet said. “Based on our preliminary investigation, we have determined that the unauthorized party likely accessed the system and gained access to certain employee data for individuals hired before January 1, 2021.”

He added that the breach did not impact other systems or customer data.

Connet said that the city of Hendersonville will contact individuals whose personal information may have been impacted.

More: HCA data breach class action lawsuit may include 11 million; Mission patients notified

More: Data breach at Asheville VA Medical Center leaked information of over 1,500 veterans

Mitchell Black covers Buncombe County and health care for the Citizen Times. Email him at mblack@citizentimes.com or follow him on Twitter @MitchABlack. Please help support local journalism with a subscription to the Citizen Times.

This article originally appeared on Asheville Citizen Times: Hendersonville city employees target of cybersecurity breach