Sussex County Prosecutor’s Office Reports Data Privacy Incident

A reported data privacy incident involving the Sussex County Prosecutor’s Office matters beyond the people who work in law enforcement. When files containing identifying information may have been accessed, affected individuals and their households may need clear information, time to review notices, and a calm plan for handling unfamiliar messages or requests. For families, that can also mean helping students understand why personal details should be shared carefully online without creating unnecessary alarm.

According to a Nov. 6, 2026 press release issued by Kennedys CMK LLP, the Sussex County Prosecutor’s Office (SCPO) experienced a data privacy event involving personal information. The release is a public notice from the announcing organization; it does not independently establish the full scope of the incident, identify the number of people affected, or say whether any particular person’s information was misused.

What the public notice says happened

According to Kennedys CMK LLP’s notice, SCPO received alerts of a disruption to its computer network on or about Aug. 10, 2026. The organization says SCPO then began an investigation immediately and engaged outside cybersecurity specialists to assist.

The notice says the investigation determined that an unauthorized person accessed the network between July 15 and July 22, 2026. According to the announcement, certain files containing personal information were accessed and may have been taken. That wording is important: the release reports potential removal of files, rather than providing a conclusion that the information was used for fraud or another specific purpose.

According to the release, the information in the affected files included first and last names, Social Security numbers, and driver’s license or state-issued identification card numbers. Those details can be especially sensitive because they are commonly used to establish or verify identity in everyday administrative settings. The public notice does not specify whose records were included, whether the files concerned current or former employees, witnesses, victims, residents, or other groups, or whether minors’ information was involved.

Why the unanswered details still matter

The reported timeline leaves a gap between the period of unauthorized access described in the notice and the network-disruption alerts that SCPO says it received. That gap does not, by itself, indicate what happened to any individual’s data. It does mean that people who receive a direct notice should read it closely for information specific to their circumstances, rather than relying on social-media summaries or assumptions based on the public release.

According to Kennedys CMK LLP, SCPO reported the incident to state and federal law enforcement, the New Jersey Cybersecurity and Communications Integration Cell, and the Office of the Attorney General. The release does not describe the status of those reports, any remedial technical steps, or whether monitoring or identity-protection services are being offered. Those are meaningful evidence gaps for readers seeking a fuller picture of the response.

The announcement was distributed by Kennedys CMK LLP, which identified itself in the release as the source of the notice. Its role in the public record here is to communicate the reported incident on behalf of the matter; the release attributes the underlying network and investigation details to SCPO.

Practical steps for households and schools

For anyone who receives an individual notification connected to this incident, the most useful first step is to preserve the notice and review exactly what information it says may have been involved. A recipient can make a simple written record of the date the notice arrived, the account or case context it references, and any follow-up instructions. This is often more helpful than trying to infer exposure from the public announcement alone.

• Verify before responding. Treat unexpected emails, texts, or calls that refer to the incident with caution. Use contact information from a mailed notice or an official source, not a link or phone number supplied in an unsolicited message.
• Review accounts methodically. Households may choose to check financial, insurance, government, and other accounts for activity they do not recognize, then document questions for the relevant institution.
• Keep children out of adult administrative tasks. Parents and caregivers can handle identity-related paperwork while explaining the basics: do not share passwords, ID images, or personal details with someone just because they claim to be an authority.
• Use a consistent school response. Teachers and school staff who hear concerns can direct families to the official notice and avoid speculating about who was affected. They should not ask students to disclose family information in class or through informal messages.

Educators can turn a difficult news item into a brief digital-citizenship discussion: distinguish between a confirmed notice, a rumor, and a suspicious message impersonating an institution. Students who want a low-pressure way to practice asking questions about online safety, privacy, or digital literacy can use COSMIQ’s free voice-driven AI tutoring, which is free forever for every K–12 student. The learning focus should remain on habits—pause, verify, and ask a trusted adult—not on fear.

What to watch for next

According to the release, SCPO’s investigation found that files may have been accessed and taken, but the public notice does not provide a count of affected people or further detail about the files. Future updates, if issued by the relevant organization, could clarify whether additional groups are being notified, what safeguards have been put in place, and what support is available to recipients.

For now, the clearest takeaway is narrow: a public notice reports unauthorized network access at the Sussex County Prosecutor’s Office and possible exposure of sensitive personal information. Readers should rely on individualized communications and verified official updates, while families and educators use the moment to reinforce careful, age-appropriate privacy practices.