HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
City of Carthage, Texas
bd_29f8961d11ac3dbf · schema v1 · pii pii-v1
Full breach record for City of Carthage, Texas →The City of Carthage, Texas, notified consumers of a data breach occurring on or about December 17, 2024. Unauthorized access to the City's network resulted in the potential copying of personal information, including names and government IDs. The City engaged external cybersecurity professionals for investigation and is offering complimentary credit monitoring via Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday14 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_db02f3d8b8a24688Indiana State AGfiled 2026-02-20Candidate
- bd_fc8f51486d147682Maine State AGfiled 2026-02-23(3d gap)Verified
- bd_2cfafbfc72754c3bTexas State AGfiled 2026-02-24(4d gap)Verified
- bd_56dd445ce310aa07New Hampshire State AGfiled 2026-02-26(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-20-city-carthage-texas-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- cc753f09e3dc9921c78b6dcf32959f0f5bbb868983041e63aa56fc98c359f0cf
Reporting entity
- Name
- City of Carthage, Texasnorm: city of carthage texas
Victim entity
- Name
- City of Carthage, Texasnorm: city of carthage texas
Incident
- Discovered
- Dec 17, 2024
- Materiality determined
- —
- Notification sent
- Feb 20, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 months(430 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.