HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumResolved
Elmore County
bd_38c95095a895b0a2 · schema v1 · pii pii-v1
Full breach record for Elmore County →Elmore County, Idaho, reported a data breach affecting one employee email account. Unauthorized access led to the exfiltration of personal information, including names, SSNs, driver's license numbers, and one payment card number with CVV. Eleven individuals were notified. The county engaged forensic investigators and legal counsel, secured accounts, and offered one year of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2023/01/1-13-2023-Supplemental-and-Final-Update-to-the-IOAG-re-Elmore-County-data-breach-on-12-14-2022-rb.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2023
- Raw hash
- ebe0ecdf999faae2acc01bd98db7b34bd95a7f49868dabeae39e1b424ac1b486
Reporting entity
- Name
- Elmore Countynorm: elmore county
- Domain
- elmorecounty.org
Victim entity
- Name
- Elmore Countynorm: elmore county
- Domain
- elmorecounty.org
Incident
- Discovered
- Dec 13, 2022
- Materiality determined
- —
- Notification sent
- Jan 13, 2023
- Affected individuals
- 11
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Provided notice to the Idaho Attorney General’s officeProvided regular updates to the Idaho Chief Information Security Officer
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.