Chelan County, Washington, confirmed a data breach occurred following a malware incident that impacted its systems between May 20 and May 24, 2026. The county's investigation determined that sensitive data was accessed during this period, and personal information may have been stolen. Public reporting indicated systems were disrupted starting May 24, 2026, affecting various government operations.
The types of data potentially exposed include names, Social Security numbers (full or partial), driver's license numbers, passport numbers, Washington ID numbers, student or military ID numbers, financial account or payment card information, birthdates, health insurance or medical information, and username/email addresses with access credentials. The total number of affected individuals has not been publicly disclosed. Early reports initially noted uncertainty regarding the full extent of compromise, but later county statements and forensic findings confirmed unauthorized access to sensitive data.
While the breach occurred and was discovered in May 2026, the specific dates for regulatory and consumer notifications are not yet available. The provided research does not indicate any class action lawsuits or multidistrict litigation directly related to this 2026 incident. As a government entity, Chelan County is not publicly traded, and traditional revenue estimates do not apply. This incident was a direct compromise of county government networks, not a third-party vendor breach.