A suspected data breach that primarily affects Whatcom County Library System’s phone line, staff email and access to digital resources was discovered Sunday.
The breach also hinders patrons’ ability to schedule new curbside pick-up appointments, as the service requires email. Public-facing library services, such as the library’s website, BiblioCommons and in-person browsing and checkout remain available, according to a press release.
Whatcom County Library System (WCLS) and Bellingham Public Library are separate systems, so the breach does not affect phone or email services at Bellingham Public Library’s three branches: Central Library, Fairhaven Branch and Barkley Branch.
WCLS Executive Director Christine Perkins said patron data in the online catalog is secure.
“The security of patron information is of utmost concern to us — always,” Perkins said in a release. “Patron data is secure. The products we use for library transactions are not hosted on our servers. This issue is confined to internal communication systems.”
The total effect of the breach, and whether it includes staff information and files, is unknown. Library officials suspect malware, but the investigation is ongoing.
WCLS has temporarily taken its EZproxy authentication services offline as part of its security review, rendering the following services unavailable: Britannica Library, Chilton Library, Consumer Reports, All Gale products, HeritageQuest Online, Newsbank, NoveList, Peterson’s Test Prep, ProQuest CultureGrams, Reference Solutions and ValueLine Investment Research. Creative Bug, Freegal and Mango Languages can still be used through their direct application.
Perkins said WCLS is working with IT professionals to return to communication as quickly as possible. WCLS still plans to host previously-scheduled events.
Updates on the situation will be posted at WCLS’s website.
