The Barnstable County Sheriff's Office in Massachusetts disclosed in late April 2025 that an employee had sent personnel records to a personal email account without authorisation. Sheriff Donna D. Buckley said she was advised of the breach on 22 April 2025, and the office published a public notice two days later.
According to the office's statement, the employee emailed a spreadsheet to a personal, non-agency account. The file contained names, home addresses, telephone numbers, dates of birth and Social Security numbers belonging to one current employee and more than 100 former employees of the sheriff's office.
The office characterised the incident as a deliberate act by a staff member rather than a failure of its digital or cybersecurity safeguards. The employee was placed on administrative leave while the matter was investigated, and the office did not name the individual or describe a motive.
Under Massachusetts General Law Chapter 93H, the sheriff's office said it was in the process of notifying the affected individuals and the state Attorney General's Office. As of early May 2025 the internal investigation remained open, and no charges or disciplinary outcome had been announced.