MalwareGovernmentGovernmentRansomwareData EncryptedIdentity (basic)Government IDMediumContained

The City of Athens, Ohio

bd_27fd9cdd610dfc23 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2020

Filed

Aug 12, 2020

To disclose

27 weeks

Affected

9state residents only

Linked

4 filings

Confidence

66%

Full breach record for The City of Athens, Ohio →

The City of Athens, Ohio, notified individuals of a security incident discovered on February 7, 2020, where suspicious activity on a server led to inability to access files. The server contained names, addresses, and SSNs. Athens engaged forensic specialists, secured the server, and offered one year of credit monitoring. No evidence of unauthorized access to sensitive systems was found, but risk could not be ruled out.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 187 days

Feb 7, 2020

Discovered

Aug 12, 2020

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_3f1267c37f58638d2020-08-12Verified
Massachusetts State AGbd_dafb43d4dd72e2822020-08-12Verified
New Hampshire State AGbd_a59125e58248cdf52020-08-17 · +5dVerified

Name: The City of Athens, Ohio
norm: the city of athens ohio

Name: The City of Athens, Ohio
norm: the city of athens ohio
Industry: Governmentllm

Discovered: Feb 7, 2020
Materiality determined: —
Notification sent: Jul 2, 2020
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: notifying regulators of the event as required, including certain state regulators

During the incident: Secured the server
Launched an investigation with the assistance of third-party computer forensic specialists
Undertook a lengthy and labor-intensive process to identify the individuals whose information may have been included in the impacted server
Notifying regulators of the event as required
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for one year provided by TransUnion Interactive
Changes made: Continuing to take steps to implement additional safeguards and strengthen policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(187 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 12 · first

Massachusetts State AGAug 12 · first

Montana State AGAug 12 · first · this page

New Hampshire State AG+5d

Pattern: first filing Aug 12 (IN), last Aug 17 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/City-of-Athens-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2020
Raw hash: e87dc84f0aade1bebca9f4400dae40f723d1d5c36f3a07437e5b4034e8f5b31d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe City of Athens, Ohio

Victim entityThe City of Athens, Ohio

Incidentdiscovered Feb 7, 2020

Stated responseSecured the server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov