MalwareIdentity (basic)Government IDPIIMediumContained

Murray County, Georgia

bd_5b6b2fa36150c0f3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Oct 1, 2026

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Murray County, Georgia →

Murray County, Georgia, notified Massachusetts residents of a ransomware attack impacting protected information. The County implemented security enhancements, conducted enterprise-wide password resets, and notified state regulators. Affected individuals were offered 24 months of IDX identity monitoring and credit protection services.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 1, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Murray County, Georgia
norm: murray county georgia

Name: Murray County, Georgia
norm: murray county georgia

Discovered: —
Materiality determined: —
Notification sent: Oct 13, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Georgia Emergency Management and Homeland Security AgencyNotified Massachusetts Attorney General

During the incident: Deployed security tools to enhance detection and accelerate response to cyber incidents
Actively monitoring our network using endpoint detection tools
Strengthened network access requirements
Enhancing protection of personal data maintained by the County
Conducting an enterprise-wide password reset
Notified the Georgia Emergency Management and Homeland Security Agency
Changes made: Offered complimentary identity theft protection services through IDX
Provided 24 months of credit and CyberScan monitoring
Provided a $1,000,000 insurance reimbursement policy
Provided fully managed ID theft recovery services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1810-murray-county-georgia/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: a28f95b7202ef20eaaa0a96e5326d86d76f988376e7b78dcd642e07f34f4c316

Reporting entityMurray County, Georgia

Victim entityMurray County, Georgia

IncidentRansomware

Stated responseDeployed security tools to enhance detection and accelerate response to cyber incidents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov