MalwareData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Upper Merion Township
bd_370202f8316b0456 · schema v1 · pii pii-v1
Full breach record for Upper Merion Township →Upper Merion Township notified consumers of a December 27, 2023 malware incident that exposed names and Social Security numbers. The Township engaged external cybersecurity professionals and law enforcement, enhanced security measures, and provided credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 254 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4fff3189e4da9135Leak Siteqilinfiled 2024-01-15(254d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_8833350d87da4b71Indiana State AGfiled 2024-09-25Verified
- bd_f2ada2a21b081675Montana State AGfiled 2024-09-25Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-25-upper-merion-township-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2024
- Raw hash
- d6461c0339e87cee9b5c12a53164a5202f4d30103e185c549d4b7509fe6c0a4e
Reporting entity
- Name
- Upper Merion Townshipnorm: upper merion township
Victim entity
- Name
- Upper Merion Townshipnorm: upper merion township
Incident
- Discovered
- Dec 27, 2023
- Materiality determined
- Sep 25, 2024
- Notification sent
- Sep 19, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 39 weeks(273 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.