MalwareGovernmentGovernmentRansomwareRansom DemandedData EncryptedTargetedPIIIdentity (basic)LowContained

Port of Kennewick

bd_37b326dac1e79e31 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 15, 2020

Filed

Mar 2, 2021

To disclose

15 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Port of Kennewick →

Port of Kennewick notified Montana and Oregon residents of a ransomware incident. Unauthorized access and encryption occurred Nov 13-16, 2020. The Port discovered unusual activity on Nov 15, 2020. PII including names and other data elements were potentially accessed. The Port engaged forensic specialists, reset passwords, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 15 weeks / 107 days

Nov 13, 2020

Begins

Nov 15, 2020

Discovered

Mar 2, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9af4a4feef61378e2021-03-02Verified

Name: Port of Kennewick
norm: port of kennewick

Name: Port of Kennewick
norm: port of kennewick
Industry: Governmentllm

Discovered: Nov 15, 2020
Breach occurred: Nov 13, 2020 – Nov 16, 2020
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reporting this incident to state regulators
Initial access: valid_credentials

During the incident: Moved quickly to notify law enforcement
Assess the security of our systems
Reset passwords
Deploy additional user authentications and protocols
Notify potentially impacted individuals
Reporting this incident to state regulators
Changes made: Offering you with access to 12 or 24 months of complimentary credit monitoring and identity restoration services through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(107 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 2 · first

Montana State AGMar 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/kenne-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 2, 2021
Raw hash: 4b2a89b2226db6f45067a58c5c4676210645aaa1f161511f00f461e8414e592f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPort of Kennewick

Victim entityPort of Kennewick

Incidentdiscovered Nov 15, 2020

Stated responseMoved quickly to notify law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov