HackingGovernmentGovernmentStolen CredentialsData ExfiltratedTargetedGovernment IDFinancial accountPIIHighContained

South Carolina Department of Revenue

bd_372f6803519c087c · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 1, 2012

Filed

Nov 26, 2012

To disclose

8 weeks

Affected

1,445state residents only

Linked

3 filings

Confidence

66%

Full breach record for South Carolina Department of Revenue →

South Carolina Department of Revenue notified NH AG of a Sept 2012 breach exposing e-filed tax returns (1998-present) including SSNs and financial data. ~1,445 NH residents affected. Secret Service investigating. Breach contained; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 30 days

discovery → filing · 8 weeks / 56 days

Sep 1, 2012

Begins

Oct 1, 2012

Discovered

Nov 26, 2012

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Hawaii State AGbd_b1ae8365587dadcd2012-11-28 · +2dCandidate
California State AGbd_2336edadee3e82522012-12-10 · +14dVerified

Name: State of South Carolina
norm: state of south carolina

Name: South Carolina Department of Revenue
norm: south carolina department of revenue
Industry: Governmentllm

Discovered: Oct 1, 2012
Breach occurred: Sep 1, 2012 – Sep 30, 2012
Undetected for: 30 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,445state-resident count only
Data types: Government IDFinancial accountPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralUS Secret Service directing the investigation
Initial access: valid_credentials

During the incident: Retained Mandiant for forensics and security remediation
The US Secret Service has been directing the investigation
Breach was contained
Introduced new technology and policy protections
Provided one year of credit monitoring and fraud resolution services through Experian
Mounted a massive public awareness campaign
Changes made: Introduced new technology and policy protections to the Department
Increased internal review procedures to watch for any unusual activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGNov 26 · first · this page

Hawaii State AG+2d

California State AG+14d

Pattern: first filing Nov 26 (NH), last Dec 10 (CA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/south-carolina-revenue-20121126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2012
Raw hash: 9bed59051bd45cef0ef0804fe6c7bb90d3783fbcc0cafbe5d18dd8828c364462

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityState of South Carolina

Victim entitySouth Carolina Department of Revenue

Incidentdiscovered Oct 1, 2012

Stated responseRetained Mandiant for forensics and security remediation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov