City of McKinney, Texas
bd_2fb2e82fb02eb0df · schema v1 · pii pii-v1
Full breach record for City of McKinney, Texas →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
McKinney Economic Development Corporation works in conjunction with the City of McKinney, Texas to promote and provide economic development for the city.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Feb 9, 2025
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- New Hampshire State AGbd_444cb76131c6fcf52025-02-07 · +3dVerified
- Massachusetts State AGbd_6ed832ad9bfdaa312025-02-05 · +5dVerified by operator
- Maine State AGbd_00ba8848cdc6de8a2025-02-04 · +6dVerified
- Indiana State AGbd_626662782dbb32462025-02-04 · +6dVerified
Show 4 more filings ↓Show fewer ↑up to 7d gap
- Montana State AGbd_67c269644968b5222025-02-04 · +6dVerified
- Vermont State AGbd_9441cd0db25cfd7f2025-02-04 · +6dVerified
- Maryland State AGbd_b25eaab826de77922025-02-04 · +6dVerified
- HHS OCRbd_3a92d791988f4c772025-02-03 · +7dVerified by operator
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Feb 3 (TX), last Feb 9 — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.