HackingGovernmentGovernmentCustomer Data InvolvedTargetedIdentity (basic)Government IDHighContained

City of Coon Rapids, Minnesota

bd_1226b9668208eb2e · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 2, 2024

Filed

Oct 17, 2024

To disclose

20 weeks

Affected · nationwide

2,1351 in this filing

Linked

3 filings

Confidence

66%

Full breach record for City of Coon Rapids, Minnesota →2 incidents on file

City of Coon Rapids, MN reported an external system breach (hacking) on June 2, 2024, affecting 2,135 individuals. The incident involved unauthorized access to files containing personal identifiers. The City contained the incident, engaged cybersecurity experts, and notified affected individuals on October 17, 2024, offering 12 months of identity theft protection.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 2, 2024 → Filed with AG Oct 17, 2024137d ✗ ME AG >90d20 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 20 weeks / 137 days

Jun 2, 2024

Begins

Jun 2, 2024

Discovered

Oct 17, 2024

Filed

vs. sector median

+9 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_695c6e2dcd95a5e12024-10-17Verified
Massachusetts State AGbd_c65e93f0ebff7f3a2024-10-17Verified

Name: City of Coon Rapids, Minnesota
norm: city of coon rapids minnesota

Name: City of Coon Rapids, Minnesota
norm: city of coon rapids minnesota
Industry: Governmentllm

Discovered: Jun 2, 2024
Breach occurred: Jun 2, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 17, 2024
Affected individuals: 2,135state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Contained the incident
Engaged leading cybersecurity experts to identify what personal information was involved
Offered 12 months of identity theft protection services through IDX
Changes made: Continually evaluate and modify practices and internal controls to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: ME AG >90d · 137dME resident >60d · 137d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 2, 2024
→ Filed with AG: Oct 17, 2024
137d 90 days ME AG >90d
Maine
Discovered: Jun 2, 2024
→ Notified: Oct 17, 2024
137d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 2, 2024 → Filed with AG: Oct 17, 2024	137d	90 days	ME AG >90d
Maine	Discovered: Jun 2, 2024 → Notified: Oct 17, 2024	137d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGOct 17 · first

Massachusetts State AGOct 17 · first

Maine State AGOct 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/335eceb8-f4c5-42ab-880b-fa509d62f8a2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2024
Raw hash: e2b5b204ceec67d0cb4fdc289e526c4f4028522f6af8fc55605521d5809c621f

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCity of Coon Rapids, Minnesota

Victim entityCity of Coon Rapids, Minnesota

Incidentdiscovered Jun 2, 2024

Stated responseContained the incident

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov