Anne Arundel County said an unauthorized actor accessed a small number of county computer systems and copied files in August and will begin mailing notification letters to affected individuals next week as part of the notification process for a separate 2025 breach.

The county identified the anomalous activity on 28 August 2026, secured its systems, and engaged external cybersecurity experts. It further stated the incident did not affect operations, as there was no evidence the copied data was used in identity theft or fraud, and it is not related to the 2025 breach.

In the earlier incident, unauthorized access occurred between 28 January and 22 February 2025 (county’s account), and following a third-party review, the county will send letters to those potentially affected starting the week of 19 October.

The county, however, urges people to check their bank statements, credit reports, and health insurance benefit statements for suspicious activity.

The county is reviewing the files to determine if any personal information was involved and has notified the FBI.