AccidentalIdentity (basic)Government IDMediumContained

City of Miami Beach Health Facilities Authority

bd_3224fa58dfde53ca · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 3, 2024

Filed

Jan 29, 2025

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for City of Miami Beach Health Facilities Authority →3 incidents on file

City of Miami Beach notified Nebraska AG that on September 3, 2024, a utility customer archive folder was inadvertently moved to a publicly accessible location in its document management system. The folder contained names, SSNs, and driver's license numbers for Nebraska residents. The City secured the data, launched an investigation, and began notifying affected individuals on November 13, 2024. One Nebraska resident was notified as of January 29, 2025. The City offered 12 months of credit monitoring through TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 3, 2024

Discovered

Jan 29, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_34a41c30502a9fe62025-01-29Candidate

Name: City of Miami Beach Health Facilities Authority
norm: city of miami beach health facilities authority
Domain: miamibeachfl.gov

Name: City of Miami Beach Health Facilities Authority
norm: city of miami beach health facilities authority
Domain: miamibeachfl.gov

Discovered: Sep 3, 2024
Materiality determined: —
Notification sent: Nov 13, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Unauthorized Access to Cloud Storage

During the incident: Removed the folder from public view
Secured the data
Launched an investigation into the nature and scope of the event
Undertook a comprehensive review in order to identify the information contained within the archive folder
Reviewing existing security policies and reinforced with its employees the importance of safeguarding the information
Providing complimentary access to credit monitoring services for twelve (12) months, through TransUnion
Changes made: Reviewing existing security policies
Reinforced with its employees the importance of safeguarding the information in its possession to prevent event similar events moving forward
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGJan 29 · first

Nebraska State AGJan 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/City of Miami Beach - Notice of Data Event - NE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 29, 2025
Raw hash: ec0ee856cad5a6c72ee3e4f3b14e5efff482d1d1ee457b900af39154588aa977

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCity of Miami Beach Health Facilities Authority

Victim entityCity of Miami Beach Health Facilities Authority

Incidentdiscovered Sep 3, 2024

Stated responseRemoved the folder from public view

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov