HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Dallas County, Texas

bd_246dfc2f7a895ec5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 19, 2023

Filed

Jul 10, 2024

To disclose

38 weeks

Affected

5state residents only

Linked

4 filings

Confidence

64%

Full breach record for Dallas County, Texas →2 incidents on file

Dallas County, Texas notified residents of a cybersecurity incident discovered on October 19, 2023. The incident involved unauthorized access to systems, potentially exposing names and Social Security Numbers. The County engaged forensic investigators, deployed EDR, forced password resets, and blocked malicious traffic. Affected individuals were offered 24 months of identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d38 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 38 weeks / 265 days

Oct 19, 2023

Discovered

Jul 10, 2024

Filed

vs. sector median

+27 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 255 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_d56812b58134782f2023-10-28 · +255dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_81d5f68b0d2e343b2024-07-10Verified by operator
HHS OCRbd_8e8641237987b1dc2023-12-18 · +205dVerified by operator

Name: Dallas County, Texas
norm: dallas county texas
Domain: dallascounty.org

Name: Dallas County, Texas
norm: dallas county texas
Domain: dallascounty.org
Industry: Governmentllm

Discovered: Oct 19, 2023
Materiality determined: —
Notification sent: Jul 10, 2024
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged third-party cybersecurity specialists to perform a comprehensive investigation
Established a dedicated call center for individuals to call
Initiated measures to secure its information
Deployed an Endpoint Detection and Response (EDR) tool across servers and endpoints
Forced password changes for all users
Blocked ingress and egress traffic to IP addresses identified as malicious
Engaged external cybersecurity experts to investigate the nature and scope of the incident
Changes made: Arranged for IDX, a third-party vendor, to provide individuals whose Social Security Number or Tax Identification Number may have been impacted by this incident with 24 months of complimentary identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(265 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRDec 18 · first

Indiana State AG+205d

Montana State AG+205d · this page

Pattern: first filing Dec 18 (TX), last Jul 10 (MT) — a 205-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1533.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2024
Raw hash: 7ba2b8c891269dffcde1bf1d2cb5899d77e93b47183c7d9a9b78716ede6a040c

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityDallas County, Texas

Victim entityDallas County, Texas

Incidentdiscovered Oct 19, 2023

Stated responseEngaged third-party cybersecurity specialists to perform a comprehensive investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov