AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Municipality of Anchorage

bd_110e978ef378aa79 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2021

Filed

Jun 8, 2021

To disclose

16 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Municipality of Anchorage →

Municipality of Anchorage notified NH AG of a data event where unredacted traffic collision reports containing names, DOB, and driver's license numbers were uploaded to LexisNexis. Discovered Feb 18, 2021. One NH resident affected. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 110 days

Feb 18, 2021

Discovered

Jun 8, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_99a2f2bbe61092e02021-06-04 · +4dVerified
Maine State AGbd_d56605fe6140d4f12021-06-04 · +4dCandidate
Indiana State AGbd_fc0d1d86839a90d22021-06-04 · +4dVerified
Montana State AGbd_ff24a2038aeefe7f2021-06-04 · +4dVerified

Name: Municipality of Anchorage
norm: municipality of anchorage

Name: Municipality of Anchorage
norm: municipality of anchorage
Industry: Governmentllm

Discovered: Feb 18, 2021
Materiality determined: —
Notification sent: Jun 4, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1074 Data Staged
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Began an investigation to determine the nature and scope of this incident
Undertook a comprehensive review to identify any personal information present in the unredacted reports
Asked Lexis to remove the unredacted records from its database
Confirming that the unredacted reports were removed from Lexis Nexis’ database
Providing access to credit monitoring services for twelve (12) months through CyberScout
Changes made: Reviewing the unredacted records to determine whether and what personal information was present
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJun 4 · first

Maine State AGJun 4 · first

Indiana State AGJun 4 · first

Montana State AGJun 4 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/municipality-anchorage-20210608.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 8, 2021
Raw hash: 5890d4306375ebd784b1cd7335033968a2885e5dbc691dcc526b75d0e1146e03

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMunicipality of Anchorage

Victim entityMunicipality of Anchorage

Incidentdiscovered Feb 18, 2021

Stated responseBegan an investigation to determine the nature and scope of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov