Anne Arundel says August intruders copied files

What the county's October 15 note says

Anne Arundel County's update, datelined Annapolis on October 15, 2026, separates two events. For August 28, 2026, it says irregular activity was detected on a limited subset of systems, the network was secured, and outside specialists were brought in. The county says an unauthorized actor reached a limited number of systems and copied certain files. It says operations were not interrupted and essential services are not expected to suffer. A records fight about a different archive is not this networklegal-aid records to 1978.

What is still unknown

The county says it is reviewing the files to determine their contents, whether they relate to individuals, and what information those individuals would have. Notification, if it is required, comes after that review. Presently, the county says, there is no indication of consumer fraud or identity theft, and no indication this event is tied to the earlier one. A review in progress is not a finding that the files were harmless. It is a finding that the county has not finished the list. The privacy desk isPrivacy.

The 2025 incident is the other letter

The same note describes access between January 28 and February 22, 2025, discovered on February 22, 2025, with files taken then as well. Eye On Annapolis says letters for that 2025 event are scheduled to begin the week of October 19, while the August 2026 review continues. Two notices in one month are easy to merge. The county's text keeps them apart, and so does this page. The paper is Asked directly, Who has the county told? It says it notified governmental partners, including federal law enforcement, and that it will update residents when it has material information. The Banner's account agrees that files were copied and that services continued.Futureweb.

What the local papers confirm

Eye On Annapolis reports the county's disclosure of the August copying and the separate 2025 mailing. The Baltimore Banner reported on October 15 that officials said files were copied and that the late-August activity did not disrupt operations. Neither paper is a forensic report. They are accounts of the county's statement. Claims that circulate on leak sites about particular document types are not adopted here, because the county has not described the files. The security desk isSecurity.

Who is in scope

Residents and employees whose information may be in the copied set, once the review says so. Until that list exists, the county has not named them. Federal law enforcement is in scope as a partner the county says it notified. A reader who wants a personal notice has to wait for the review, or for the separate 2025 letter if that older event included them. The software desk is Asked directly, Does the county link the copied files to fraud? It says there is presently no indication the files have been used for consumer fraud or identity theft, and no indication the August event is related to the earlier one.Software.

What this page will not reconstruct

How the actor got in, which systems, and which files are not in the county's public note. Printing a guessed path would go past the document. The public facts are the date of detection, the fact of copying, the lack of an operational outage, the ongoing review, and the separation from 2025. The hardware desk is Asked directly, Does the county say personal data was taken? Not yet. It says it is reviewing the copied files to see whether they relate to people, and that it will notify anyone affected as the law requires.Hardware.

How a resident should read the page

The county says further updates will come when it has material information, and that affected people will be notified as the law requires. A webpage that says files were copied is the confirmation. It is not yet the notice letter. The 2025 letters, as Eye On Annapolis schedules them, answer a different incident. The key that stays with the holder, a different privacy problem, is Asked directly, Is this the 2025 breach? The county says no. The 2025 access ran from January 28 to February 22, 2025. Eye On Annapolis says notification letters for that older event are to start the week of October 19. The August 2026 copying is a second incident.the key stays with the holder.

Essential services, in the county's words

The note says there is no anticipated impact to essential services going forward. That sentence is about operations after the response. It does not say the copied files were empty of personal data. Those are independent questions, and the county has answered only the first. The mobile desk is Asked directly, Were county services knocked offline in August? The county says the August activity did not interfere with operations and that it does not expect an impact on essential services.Mobile.

The line to keep

August 28, 2026: limited systems, files copied, services kept running, contents under review. The 2025 breach is a second event with its own letters. No fraud is known to the county, and the file list is not finished. The short answer this page will stand on is this: That on August 28 it found irregular activity on a limited set of systems, that an unauthorized actor copied files from those systems, and that operations were not stopped. The county says it is still reviewing whether the files identify people. It says a 2025 breach is a different incident.