Social EngineeringGovernmentGovernmentPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHighContained

Sumter County, GA Official Website

bd_3f3dbb06d93e736d · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 1, 2021

Filed

Nov 2, 2021

To disclose

9 weeks

Affected

2,241state residents only

Confidence

66%

Full breach record for Sumter County, GA Official Website →

Sumter County, SC, notified individuals of a phishing incident where an employee email account was compromised. Attackers accessed email contents, potentially exposing names, addresses, DOBs, and SSNs/driver's license numbers of employees, vendors, and applicants. The county reset passwords, disabled the account, engaged cybersecurity experts, and offered 12 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due9 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 14 days

discovery → filing · 9 weeks / 62 days

Aug 18, 2021

Begins

Sep 1, 2021

Discovered

Nov 2, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,241 affectedView incident

Name: Sumter County, GA Official Website
norm: sumter county ga official website
Domain: sumtercountyga.us

Name: Sumter County, GA Official Website
norm: sumter county ga official website
Domain: sumtercountyga.us
Industry: Governmentllm

Discovered: Sep 1, 2021
Breach occurred: Aug 18, 2021
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 1, 2021
Affected individuals: 2,241state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Had the employee’s password reset and disabled the affected email account
Working with cyber security experts
Closely monitoring and restricting outside access to our email system
Adding multi-factor authentication for all users to access our network
Strengthening our filtering to help block dangerous emails like phishing attempts
Identifying all emails from external sources to increase employee awareness
Changes made: Adding multi-factor authentication for all users to access our network
Strengthening our filtering to help block dangerous emails like phishing attempts
Identifying all emails from external sources to increase employee awareness
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SumterCounty.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 2, 2021
Raw hash: 5e6960447d1b9ed33486eda7107a55cbf7207239258ac68ad10effa7e3c72d0f

Reporting entitySumter County, GA Official Website

Victim entitySumter County, GA Official Website

Incidentdiscovered Sep 1, 2021

Stated responseHad the employee’s password reset and disabled the affected email account

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov