2026 City of Roanoke VA — phishing email compromise; SSN/passport/financial data may be exposed
Data compromised
Per city notice letters (~Aug 24): full name or first initial + last name combined with Social Security number, passport number, and/or financial account information may have been accessible. Headcount not published.
Technical writeup
Verified City of Roanoke notices / local press — August–September 2026. Phishing interaction May 6 compromised a city email account; locked May 7; insurance-led investigation; letters dated Aug 24. Potentially exposed: names with SSN, passport, and/or financial account data present in the compromised mailbox. Reported to FBI Cyber and Virginia Fusion Center. No published census. recordsAffected 0; companyConfirmed true.
Root cause
May 6, 2026 employee interaction with phishing email; malicious actor accessed departmental email/data before account locked next day