HackingGovernmentGovernmentStolen CredentialsDelayed DiscoveryData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Tacoma-Pierce County Health Department

bd_2f3c3a81e82cff6c · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 1, 2023

Filed

Jul 11, 2023

To disclose

6 weeks

Affected

9,500state residents only

Confidence

67%

Full breach record for Tacoma-Pierce County Health Department →

Tacoma-Pierce County Health Department notified WA AG of a data breach affecting ~9,500 residents. Unauthorized access occurred in Nov 2018 but was discovered in June 2023 when DOJ found exposed data (names, DOB, emails, driver's licenses) on BreachForums. The breach involved stolen credentials for the food worker card database. The department has migrated to a new secure system.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1656 days

discovery → filing · 6 weeks / 40 days

Nov 18, 2018

Begins

Jun 1, 2023

Discovered

Jul 11, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9,500 affectedView incident

Name: McGavick Graves PS
norm: mcgavick graves

Name: Tacoma-Pierce County Health Department
norm: tacoma pierce county health department
Industry: Governmentllm

Discovered: Jun 1, 2023
Breach occurred: Nov 18, 2018
Undetected for: 1,656 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2023
Affected individuals: 9,500state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameDriver's licence numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 500+dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: Notified Washington State Attorney General
Initial access: valid_credentials

During the incident: Moved to a new, more secure system
Changes made: Moved to a new, more secure system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA25748.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2023
Raw hash: 4f28ff826db49a0210cc502dad76dcc0d297d9fa5a46f2d718f41eaf14d99b71

Reporting entityMcGavick Graves PS

Victim entityTacoma-Pierce County Health Department

Incidentdiscovered Jun 1, 2023

Stated responseMoved to a new, more secure system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com