MalwareGovernmentGovernmentRansomwareCapture Stored DataRansom DemandedData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
County of Rock, WI
bd_1bdb3ae6836cc025 · schema v1 · pii pii-v1
Full breach record for County of Rock, WI →County of Rock, WI experienced a ransomware event between September 22–30, 2023, during which unauthorized actors accessed county computer systems, encrypted certain systems, and acquired data including names and Social Security numbers of 22,259 individuals. A comprehensive data review completed July 29, 2024 identified 1 Maine resident affected. Written notice was sent October 9, 2024. IDX credit monitoring (12 months) was offered to affected individuals.
Maine clockDiscovered Jul 29, 2024 → Filed with AG Oct 9, 202472d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b2633588-36cf-453b-a56f-859be08f5c53.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2024
- Raw hash
- 4ecf381accd475fada093ac81cc0555d08a2f7448f997f97b027292ed089acaa
Reporting entity
- Name
- County of Rock, WInorm: county of rock wi
- Industry
- Other Government Entity
Victim entity
- Name
- County of Rock, WInorm: county of rock wi
- Industry
- Other Government Entity
- Industry
- Governmentllm
Incident
- Discovered
- Jul 29, 2024
- Materiality determined
- —
- Notification sent
- Oct 9, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified relevant regulators as necessary
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- ME AG >30d · 72dME resident >60d · 72d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 29, 2024→ Filed with AG: Oct 9, 202472d 30 days (soft) ME AG >30d Maine Discovered: Jul 29, 2024→ Notified: Oct 9, 202472d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.