Lycoming County officials have revealed that earlier this month, ransomware was detected on the county’s computer network. Notice is now posted at https://www.lyco.org/ for individuals whose information may have been compromised.

The county is providing this notification, as required by state law, while a review of the impacted data is conducted. When the review is completed, required written notice will be provided to individuals and complimentary credit monitoring services offered where appropriate. Although the investigation is still ongoing, at this time, the county has determined that the data may contain driver’s license numbers.

“The privacy and security of the information we maintain is very important to us, and we remain committed to doing everything we can to maintain the confidentiality of such information,” said Michael Hagen, Director of Human Resources / Chief Clerk.

According to information released by the county, on Aug. 12, the ransomware was found on the network and “as soon as the county learned of the incident, it launched an investigation with assistance from nationally recognized third-party cybersecurity and data forensics consultants to secure its network and investigate the scope of the incident and alerted federal law enforcement.”

“On August 18, 2025, as part of the ongoing investigation, the county determined that the cyber criminals took certain data from its network, which included personally identifiable information. The affected information appears to be mostly related to data held by the County Department of Public Safety,” the release stated.

A thorough review of the data to determine what information may have been involved will be conducted to establish the information involved and who may have been affected and where they reside so that notice can be provided.

The county continues to closely monitor its systems, data, and network access. Additionally, they are evaluating and making changes to strengthen the network against any future incidents.

“The County will continue to invest in the internal processes, tools, and resources to reduce the likelihood of future security incidents,” Hagen stated.

As a precautionary measure, potentially impacted individuals are encouraged to take appropriate steps to protect their personal information by remaining vigilant and closely monitoring financial accounts and credit reports for inaccurate information and reporting any unusual activity to law enforcement, the release stated.