CIRCLEVILLE, Ohio — The Pickaway County Board of Developmental Disabilities said Thursday that it is notifying roughly 1,041 people after an unauthorized party got into a single employee’s work email account in late August and may have reached personal and health-related information kept in that mailbox.
The access ran from Aug. 27 into Aug. 28, 2026, and involved one employee’s Office365 email account, the board said in its notice. The board said it spotted the intrusion on Aug. 28, cut off the account’s access right away and opened an investigation.
The intrusion reached only that one mailbox, according to the board, which said it has found no evidence that any other board systems, files or storage were accessed.
Emails and attachments in the account may have included, for some of the people affected, a name, date of birth, home address, phone number or email address, an MUI number, and related service or health information, the board said. The board said the information differed from person to person and that not every item was present for every individual.
The board said it has secured the account, gone through the mailbox in detail to work out what information may have been affected and who was involved, and tightened account security across the organization, including phishing-resistant sign-in protections on accounts that can reach sensitive information. The board said it also reported the incident to state and federal authorities as required.
Affected individuals are being notified directly by mail where the board has contact information, and the board said it shared the notice with media serving Pickaway County as an added way to reach people who may be affected.
The board urged anyone who believes they may be affected to stay alert for unsolicited messages asking for personal information, to check account statements and explanation-of-benefits notices for activity they do not recognize, and to consider a fraud alert or security freeze with the major credit bureaus. Suspected identity theft should be reported to local law enforcement and to the Federal Trade Commission at IdentityTheft.gov, the board said.
People with questions can reach the board at 740-477-3353 or toll-free at 844-215-8248, Monday through Friday from 8 a.m. to 4 p.m. Eastern Time.
