HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsMediumResolved

Elmore County

bd_38c95095a895b0a2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 13, 2022

Filed

Jan 13, 2023

To disclose

4 weeks

Affected

11state residents only

Confidence

64%

Full breach record for Elmore County →4 incidents on file

Elmore County, Idaho, experienced a data breach involving unauthorized access to an employee email account on December 13, 2022. The attacker removed contents from the mailbox, exposing names, Social Security numbers, and driver's license/state ID numbers of 11 Idaho residents. One individual's payment card number, CVV, and expiration date were also affected. The incident was discovered when suspicious emails were sent from the account. The county engaged forensic investigators, secured the account, and notified affected individuals on January 13, 2023, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 31 days

Dec 13, 2022

Begins

Dec 13, 2022

Discovered

Jan 13, 2023

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident

Name: Elmore County
norm: elmore county
Domain: elmorecounty.org

Name: Elmore County
norm: elmore county
Domain: elmorecounty.org
Industry: Governmentllm

Discovered: Dec 13, 2022
Breach occurred: Dec 13, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 13, 2023
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Provided notice of this incident to the Idaho Attorney General’s officeProvided regular updates to the Idaho Chief Information Security Officer
Initial access: valid_credentials

During the incident: Immediately began working with Sylint, a digital forensic firm, and legal at Eckert Seamans Cherin & Mellott, LLC, to secure the email environment and investigate the scope of the incident
Secured the email account
Notified all recipients of the suspicious emails
Changed passwords and took steps to further secure any impacted email accounts
Geoblocking certain foreign IP addresses
Working to implement two factor authentication to our email accounts
Reviewing and strengthening security policies and procedures
Provided notice of this incident and regular updates to the Idaho Chief Information Security Officer
Provided notice of this incident to the Idaho Attorney General’s office
Offering a one-year, complimentary membership with Experian for credit monitoring and identity theft services
Changes made: Changed passwords and took steps to further secure any impacted email accounts
Geoblocking certain foreign IP addresses
Working to implement two factor authentication to our email accounts
Reviewing and strengthening security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2023/01/1-13-2023-Supplemental-and-Final-Update-to-the-IOAG-re-Elmore-County-data-breach-on-12-14-2022-rb.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 13, 2023
Raw hash: ebe0ecdf999faae2acc01bd98db7b34bd95a7f49868dabeae39e1b424ac1b486

Reporting entityElmore County

Victim entityElmore County

Incidentdiscovered Dec 13, 2022

Stated responseImmediately began working with Sylint, a digital forensic firm, and legal at Eckert Seamans Cherin & Mellott, LLC, to secure the email environment and investigate the scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov