The Montgomery County Emergency Management Agency has indicated that personal information of certain current and former county employees may have been impacted by the outside malware attack the county suffered in November.

Around November 14, Montgomery County became the victim of an outside malware attack that impaired a number of its computer systems and operations. The malware was addressed within minutes of its discovery, and the EMA launched an investigation into whether any sensitive information was impacted.

The investigation revealed that no public personal data was impacted. However, because unauthorized access to one county email account occurred, personal information relating to certain current and former county employees may have been impacted.

Montgomery County EMA Coordinator Greg Nimmo says that while there is no indication that employee information stored in the compromised email account was subject to unauthorized access -- and there have been no indications of misuse of employee personal information in relation to the incident -- all potentially impacted individuals have been notified pursuant to applicable laws and offered assistance to mitigate any issues or concerns.

According to Nimmo, the county continues to increase computer security and has continued to monitor against suspicious activity since the incident. No further malware activity has been noted to date.