Union County, Ohio

Union County, Ohio is a county government located in the United States of America. It provides a range of public services to the residents and businesses within its territorial boundaries, including law enforcement, judicial administration, road maintenance, and health and human services. As a municipal entity, it operates under the authority of Ohio state law and is responsible for enforcing local ordinances and delivering essential community programs. The county’s offices maintain records and administer programs that touch the daily lives of its constituents.

The jurisdiction of Union County encompasses a population of tens of thousands of individuals, as indicated by the personal data exposed in a 2025 cyber incident. In May 2025, the county reportedly paid a one‑million‑dollar ransom in cryptocurrency to the cyber extortion group Kairos to prevent the release of data obtained through a brute‑force intrusion. The attackers claimed to have exfiltrated over two terabytes of files containing names, birth dates, identification numbers, Social Security numbers, financial and medical details, fingerprints, and payment card information. A three‑week negotiation preceded the payment, during which the county’s offer increased from an initial $100,000 to $430,000 before the final $1 million demand was met.

The incident highlighted Union County’s role as a custodian of extensive sensitive information, requiring coordination across legal, leadership, financial, and communications functions during the extortion episode. Ransom‑ISAC characterized the attack as a pure extortion effort without file‑encrypting ransomware, noting that the attackers used threats of public exposure and proof‑of‑access artifacts to exert pressure. The county’s response reflected an attempt to balance operational continuity with the protection of resident privacy amid a high‑stakes data breach. As a local government, Union County is subject to state and federal data protection regulations that govern the handling of the personal information it collects. The event underscored the challenges faced by municipal entities in safeguarding large volumes of citizen data against sophisticated cyber threats.