MalwareGovernmentGovernmentRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)EmploymentLowContained

Town of Apex

bd_399263c65fe910fc · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 2, 2024

Filed

Mar 30, 2026

To disclose

21 months

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Town of Apex →

The Town of Apex experienced a ransomware incident in June 2024. Unauthorized actors accessed systems from June 23 to July 2, 2024. The Town discovered irregularities on July 2, 2024. Data was exfiltrated and uploaded to a cloud storage provider. Affected data includes names and employment/affiliation information. The Town engaged forensic professionals, notified law enforcement, and obtained a court order to retrieve the data. Credit monitoring is being offered.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d21 months discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 21 months / 636 days

Jun 23, 2024

Begins

Jul 2, 2024

Discovered

Mar 30, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_4a934c48207f171d2026-03-30Candidate
Indiana State AGbd_5cce7f628cd5a86a2026-03-30Candidate
Nebraska State AGbd_ac38b669739d9be22026-03-30Verified
New Hampshire State AGbd_26c16ad80a169c992026-04-06 · +7dVerified

Name: Town of Apex
norm: town of apex

Name: Town of Apex
norm: town of apex
Industry: Governmentllm

Discovered: Jul 2, 2024
Breach occurred: Jun 23, 2024 – Jul 2, 2024
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Employment
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementWorked with the FBIReported this Incident to relevant government agencies

During the incident: Proactively taking systems offline
Engaged data security and privacy professionals
Notified federal law enforcement
Worked with the FBI
Petitioned the Wake County Superior Court for a Temporary Restraining Order to access data from cloud storage provider
Worked with a trusted third-party data analytics team to conduct an in-depth review of the impacted data
Posted the first notification of this issue on our website on July 3, 2024
Provided frequent updates in the following days, then periodic updates as new information became available
Changes made: Changing passwords
Strengthening authentication controls
Enhancing endpoint detection and monitoring capabilities
Continuing to make security a priority, including regularly monitoring for potential security threats and managing access to our systems
Continuing to work with leading privacy and security firms
Offering complimentary access to Experian IdentityWorks for [Extra4] months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 months(636 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGMar 30 · first

Nebraska State AGMar 30 · first

Massachusetts State AGMar 30 · first · this page

New Hampshire State AG+7d

Pattern: first filing Mar 30 (IN), last Apr 6 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-486-town-of-apex-north-carolina/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2026
Raw hash: c2f108e54cb5a0696290fb09b86a667099052e6ccef5a990697528849dbc024e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityTown of Apex

Victim entityTown of Apex

Incidentdiscovered Jul 2, 2024

Stated responseProactively taking systems offline

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov