MalwareGovernmentGovernmentRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedRansom DemandedPIIIdentity (basic)LowContained

County of Rock, WI

bd_2a8f384d2a32e927 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 29, 2023

Filed

Oct 9, 2024

To disclose

13 months

Affected

1state residents only

Linked

2 filings

Confidence

65%

Full breach record for County of Rock, WI →2 incidents on file

County of Rock, WI notified one New Hampshire resident of a ransomware event. Unauthorized access occurred between Sept 22-30, 2023, resulting in system encryption and data acquisition. Discovery was Sept 29, 2023. The County notified federal law enforcement, offered credit monitoring, and enhanced security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 13 months / 376 days

Sep 22, 2023

Begins

Sep 29, 2023

Discovered

Jul 29, 2024

Scope determined

Oct 9, 2024

Filed

vs. sector median

+43 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_1bdb3ae6836cc0252024-10-09Candidate

Name: County of Rock, WI
norm: county of rock wi

Name: County of Rock, WI
norm: county of rock wi
Industry: Governmentllm

Discovered: Sep 29, 2023
Breach occurred: Sep 22, 2023 – Sep 30, 2023
Undetected for: 7 daysoccurrence → discovery
Materiality determined: Jul 29, 2024
Notification sent: Oct 9, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcement regarding the eventproviding written notice of this incident to relevant regulators, as necessary

During the incident: Moved quickly to investigate and respond to the incident
Assess the security of the County systems
Identify potentially affected individuals
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for , through IDX, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing written notice of this incident to relevant regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Reviewing and enhancing our existing policies and procedures related to network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(376 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGOct 9 · first

New Hampshire State AGOct 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/county-rock-wi-20241009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2024
Raw hash: 561e78bd70cdc350a47bd51c502c551ab8f4d68a648f4e70adf631762a7d0a0e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCounty of Rock, WI

Victim entityCounty of Rock, WI

Incidentdiscovered Sep 29, 2023

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov