# The 2025 letters were a different year

2026-10-17

Anne Arundel County confirmed files were copied from a limited set of systems after 28 August. Rhysida is selling a claimed 2.6 TB set for 25 bitcoin. The letters going out from 19 October are the 2025 incident. The county has not numbered residents for August.

Canonical: https://www.fabiocti.com/notes/the-2025-letters-were-a-different-year/
Author: Fabio Correia

The suburb confirmed a copy. The gang put a price on a zip. The letters in the mail are last year.

Anne Arundel County told Recorded Future that it saw irregular activity on 28 August and looked at a limited subset of systems. An unauthorized actor reached a limited number of those systems and copied files. It has told federal law enforcement. It has not said which files, and it is still asking whether any of them are about residents. The county has more than 600,000 people and Annapolis in it.

Rhysida claimed the job and is selling a 2.6 TB archive, 814,500 files, for 25 bitcoin, about two million dollars. The group’s list, in Cybernews’s reading: medical faxes, Social Security numbers, licences, payroll, jail intelligence, methadone-clinic records. That is the actor’s catalogue. It is not the county’s field list. The county has not confirmed a resident count for August.

On Thursday the same office said it would start mailing people about a January–February 2025 incident in the week of 19 October. A spokesperson told the Record the August copy is a separate incident. Last year was a different group, and it took systems down.

## What 2.6 TB will be asked to cover

It will be briefed as every resident of the county. The county has not said that. It will be briefed as the letters that arrive next week. Those letters are 2025. Do not paste a methadone row onto a 2025 envelope. Do not brief August as empty because the county has not finished the file review.

If you live there, the useful sentence is still the county’s: limited systems, files copied, residents under review. A sale page is a deadline. It is not a finding that the zip matches the copy. A mail that already knows a clinic visit is a fact if it does. The leak-site sentence is not.

Two years, two incidents, one mailbox. Keep the year on the letter.