HackingGovernmentGovernmentCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

The County of Delaware, Pennsylvania

bd_04d0792bf4b93f4e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 21, 2020

Filed

Jul 1, 2021

To disclose

32 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for The County of Delaware, Pennsylvania →

The County of Delaware, PA notified residents of unauthorized access to its network discovered on Nov 21, 2020. The incident potentially exposed names, SSNs, driver's licenses, financial account info, DOB, and medical/health insurance info. The County took network portions offline, reset passwords, engaged forensic specialists, and offered credit monitoring via Experian. The investigation is ongoing but the incident is considered contained.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 222 days

Nov 21, 2020

Begins

Nov 21, 2020

Discovered

Jul 1, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_61ce666d8072cceb2021-07-01Verified
New Hampshire State AGbd_33bd1f94d4cce0762021-07-06 · +5dVerified

Name: The County of Delaware, Pennsylvania
norm: the county of delaware
Domain: co.summitoh.net

Name: The County of Delaware, Pennsylvania
norm: the county of delaware pennsylvania
Industry: Governmentllm

Discovered: Nov 21, 2020
Breach occurred: Nov 21, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 1, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took portions of the network offline
Reset passwords
Commenced an investigation that included working with computer forensic specialists
Secured the services of Experian to provide credit monitoring and identity restoration services
Changes made: Continue to evaluate ways to improve existing protections to secure information within the network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(222 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 1 · first

Delaware State AGJul 1 · first · this page

New Hampshire State AG+5d

Pattern: first filing Jul 1 (MA), last Jul 6 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/07/County-of-Delaware-PA-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2021
Raw hash: 139897fd74c4b72e0af32fdf6589b93225632ab34a46e14cba61fea8c535c1fb

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe County of Delaware, Pennsylvania

Victim entityThe County of Delaware, Pennsylvania

Incidentdiscovered Nov 21, 2020

Stated responseTook portions of the network offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov