MalwareGovernmentGovernmentRansomwareStolen CredentialsData ExfiltratedRansom DemandedPIIIdentity (basic)LowResolved

WSSC Water

bd_105a5811ddf35e4f · schema v1 · pii pii-v1

Severity

Low

Discovered

May 24, 2021

Filed

Jul 26, 2021

To disclose

9 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for WSSC Water →2 incidents on file

WSSC Water notified individuals of a May 24, 2021 ransomware incident. Unauthorized access occurred prior to the attack, impacting personal information including names. The ransomware was halted, systems restored, and the FBI and Maryland AG were notified. Credit monitoring and identity theft insurance are offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 63 days

May 24, 2021

Discovered

Jul 26, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Delaware State AGbd_70e2ab39b1c5177f2021-07-30 · +4dVerified
South Carolina State AGbd_b9273b8e285944392021-08-02 · +7dVerified
Oregon State AGbd_df0fb84769c435822021-08-02 · +7dVerified
California State AGbd_99b0a93e4b4a23312021-08-17 · +22dVerified

Name: WSSC Water
norm: wssc water
Domain: wsscwater.com

Name: WSSC Water
norm: wssc water
Domain: wsscwater.com
Industry: Governmentllm

Discovered: May 24, 2021
Materiality determined: —
Notification sent: Jul 26, 2021
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to the FBIReported this incident to Maryland Attorney General
Initial access: valid_credentials

During the incident: Offering five (5) years of credit and identity monitoring with $1,000,000 in identity theft insurance at no cost
Moved quickly to secure our systems
Conducted a comprehensive investigation
Reported this incident to the FBI and Maryland Attorney General
Reviewing our policies, procedures, and processes related to storage of and access to personal information
Confirming the security of WSSC Water’s systems
Reviewing the contents of relevant data for sensitive information
Notifying impacted individuals associated with that sensitive information
Cooperate with any investigation by law enforcement
Changes made: Reviewing our policies, procedures, and processes related to storage of and access to personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 26 · first · this page

Delaware State AG+4d

South Carolina State AG+7d

Oregon State AG+7d

California State AG+22d

Pattern: first filing Jul 26 (MT), last Aug 17 (CA) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-6.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2021
Raw hash: 202f0e25c56694d619e96d30afdb5303adbd4675cc241abd78668c197a5985b4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWSSC Water

Victim entityWSSC Water

Incidentdiscovered May 24, 2021

Stated responseOffering five (5) years of credit and identity monitoring with $1,000,000 in identity theft insurance at no cost

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov