HackingGovernmentGovernmentTargetedIdentity (basic)Government IDHighContained

Housing Authority of the City of Aiken

bd_0078b132631d676c · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 23, 2024

Filed

Jan 9, 2025

To disclose

29 weeks

Affected

3,171state residents only

Linked

6 filings

Confidence

62%

Full breach record for Housing Authority of the City of Aiken →

Aiken Housing Authority notified South Carolina residents of a data breach occurring June 23-24, 2024. Unauthorized access resulted in the compromise of names, DOBs, addresses, SSNs, and driver's license numbers. The Authority engaged forensic experts, notified law enforcement, and is offering 12 months of credit monitoring via IDX. Notices were sent January 8, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d29 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 29 weeks / 200 days

Jun 23, 2024

Begins

Jun 23, 2024

Discovered

Jan 9, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 200 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_56e2192c8dfbc36b2024-06-23 · +200dVerified

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_4977c615cf332fbf2025-01-09Verified by operator
New Hampshire State AGbd_a939957e53c613132025-01-09Verified
Nebraska State AGbd_0771534ee2edcea62025-01-08 · +1dVerified
Maryland State AGbd_d1951a57abeb98392025-11-13 · +308dVerified

Name: Housing Authority of the City of Aiken
norm: housing authority of the city of aiken
Domain: aikenhousing.org

Name: Housing Authority of the City of Aiken
norm: housing authority of the city of aiken
Domain: aikenhousing.org
Industry: Governmentllm

Discovered: Jun 23, 2024
Breach occurred: Jun 23, 2024 – Jun 24, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2025
Affected individuals: 3,171state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notified state regulators

During the incident: Took measures to secure its network, systems, and data
Notify law enforcement and other government agencies
Enlisted the assistance of independent cybersecurity experts to conduct a forensic investigation
Notified local and federal law enforcement agencies and state regulators
Offering identity theft protection services through IDX
Changes made: Reviewing existing policies and procedures
Enhanced its technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: Leak >180dSC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJan 8 · first

Massachusetts State AG+1d

New Hampshire State AG+1d

South Carolina State AG+1d · this page

Maryland State AG+309d

Pattern: first filing Jan 8 (NE), last Nov 13 (MD) — a 309-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/AikenHousingAuthority.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2025
Raw hash: 49881cdc3b4cdc7abeb32d4747d70871baffdcafc7d04ae9d810a7de105f2d52

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityHousing Authority of the City of Aiken

Victim entityHousing Authority of the City of Aiken

Incidentdiscovered Jun 23, 2024

Stated responseTook measures to secure its network, systems, and data

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov