HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Wayne County, Michigan

bd_0dcf98864eb0562c · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2024

Filed

Dec 22, 2025

To disclose

13 months

Affected

Not disclosed

Linked

2 records

Confidence

68%

Full breach record for Wayne County, Michigan →2 incidents on file

Wayne County, Michigan notified consumers of a data security incident where an unauthorized individual copied files from the network in late 2024. Suspicious activity was identified in late 2024, and investigation confirmed exfiltration in January 2025. Personal information, including names, may have been impacted. The County engaged external cybersecurity resources, disconnected systems, and notified law enforcement. Identity theft protection services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday13 months discovery → filing

Incident timeline

discovery → filing · 14 months / 416 days

Nov 1, 2024

Discovered

Dec 22, 2025

Filed

This filing is one of 2 records about the same incident.View merged incident

A leak claim by interlock about this victim was first seen 425 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinterlockbd_a7841c578d2fff332024-10-23 · +424dCandidate

Name: Wayne County, Michigan
norm: wayne county michigan
Domain: waynecounty.com

Name: Wayne County, Michigan
norm: wayne county michigan
Domain: waynecounty.com
Industry: Governmentllm

Discovered: Nov 1, 2024
Materiality determined: —
Notification sent: Dec 22, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement agencies

During the incident: Implemented incident response protocols
Disconnected systems
Engaged external cybersecurity resources to assist with an investigation
Notified law enforcement agencies
Changed passwords
Restored and recovered systems from backups
Deployed endpoint detection and monitoring tools
Changes made: Deployed endpoint detection and monitoring tools
Offering identity theft protection services Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(386 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-12-22-wayne-county-michigan-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2025
Raw hash: 8c8bbea2e5343b62677daa4973caeb9184790dba32e31a6860ce92f290fef319

Linked disclosures

Ransomware claims (1)

Reporting entityWayne County, Michigan

Victim entityWayne County, Michigan

Incidentdiscovered Nov 1, 2024

Stated responseImplemented incident response protocols

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov