MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Spartanburg County, South Carolina

bd_319d00256855a8e4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 27, 2023

Filed

Oct 11, 2023

To disclose

24 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Spartanburg County, South Carolina →2 incidents on file

Spartanburg County, SC, notified consumers of a ransomware attack detected on April 27, 2023, involving unauthorized access between April 5-27. Personal information including names, addresses, and government IDs was accessed. The County engaged forensic investigators, notified law enforcement, and offered 12 months of Experian credit monitoring. No data was found on the dark web.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday24 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 22 days

discovery → filing · 24 weeks / 167 days

Apr 5, 2023

Begins

Apr 27, 2023

Discovered

Oct 11, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_2c528a9abc3b9d932023-08-02 · +70dVerified
South Carolina State AGbd_8f44ec504b4a30152023-07-31 · +72dVerified
Montana State AGbd_cefbf06df9a287fd2023-07-28 · +75dCandidate
Maine State AGbd_5210ac25cc366aa32023-07-25 · +78dVerified

Show 1 more filing ↓up to 78d gap

Indiana State AGbd_a1b6c0a791ad92292023-07-25 · +78dVerified

Name: Spartanburg County, South Carolina
norm: spartanburg county

Name: Spartanburg County, South Carolina
norm: spartanburg county south carolina
Industry: Governmentllm

Discovered: Apr 27, 2023
Breach occurred: Apr 5, 2023 – Apr 27, 2023
Undetected for: 22 daysoccurrence → discovery
Materiality determined: Oct 11, 2023
Notification sent: Oct 11, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this to State and Federal law enforcementwill provide notice of this incident to all appropriate state regulators

During the incident: Hired a nationally recognized digital forensics firm
Reported this to State and Federal law enforcement
Began an investigation to understand what happened, contain the attack, and determine the scope of the incident
Worked with our team to secure our network, restore impacted systems, and begin an investigation
Searched Dark Web sources
Changes made: Conducted enterprise-wide password reset with increased complexity requirements
Deployed security tools to enhance detection and accelerate response to cyber incidents
Working with third-party experts to enhance our cyber security
Strengthening security requirements for existing County multi-factor authentication requirements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(167 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJul 25 · first

Indiana State AGJul 25 · first

Montana State AG+3d

South Carolina State AG+6d

Massachusetts State AG+8d

Vermont State AG+78d · this page

Pattern: first filing Jul 25 (ME), last Oct 11 (VT) — a 78-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-10-11-spartanburg-county-south-carolina-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 11, 2023
Raw hash: 5872718fd4e485117e45e447fd9711d68f3f553b586dcf139128b1c18f0d3116

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySpartanburg County, South Carolina

Victim entitySpartanburg County, South Carolina

Incidentdiscovered Apr 27, 2023

Stated responseHired a nationally recognized digital forensics firm

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov