HackingGovernmentGovernmentStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

The City of Osceola, Iowa

bd_3e9699d3712470e1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 3, 2021

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for The City of Osceola, Iowa →

The City of Osceola, Iowa notified the NH Attorney General that an unauthorized individual accessed a single employee's email account between February 24, 2021, and March 17, 2021. The investigation determined that the name and Social Security number of one New Hampshire resident were potentially accessed. The City secured the account, engaged a cybersecurity firm, and is offering one year of credit monitoring to the affected resident.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 24, 2021

Begins

Jun 3, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: The City of Osceola, Iowa
norm: the city of osceola iowa
Domain: osceolaia.net

Name: The City of Osceola, Iowa
norm: the city of osceola iowa
Domain: osceolaia.net
Industry: Governmentllm

Discovered: —
Breach occurred: Feb 24, 2021 – Mar 17, 2021
Materiality determined: —
Notification sent: Jun 3, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Secured the email account
Commenced an investigation with the assistance of a cybersecurity firm
Reviewed the emails and attachments that could have been accessed
Mailing a notification letter to the New Hampshire resident
Offering the New Hampshire resident a complementary one-year membership in credit monitoring and identity theft protection services through Kroll
Established a dedicated phone number where the individual may obtain more information regarding the incident
Changes made: Implemented additional safeguards to further protect personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/city-osceola-iowa-20210603.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 3, 2021
Raw hash: 33480a2772e6d7af956018f15e23b09b1a8f901f07aceeb0d60f8a7434c872ef

Reporting entityThe City of Osceola, Iowa

Victim entityThe City of Osceola, Iowa

IncidentUnauthorized Access

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov