Jeffersonville, KY officials believe a “serious” data breach in which names and addresses — and some Social Security numbers — were mistakenly e-mailed to city employees and began in 2001 as the city finance department began sending out its monthly list of vendor payments.

City Attorney Les Merkley, also a victim, said a new software program made Social Security numbers appear more prominently, which is what likely led a city employee to alert officials.

Merkley also added that ID-theft and credit service valued at $59 per month for each person who signs up is being offered and goes beyond the notifications required by state law.