HackingGovernmentGovernmentStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedPIIFinancial accountIdentity (basic)LowResolved

Aurora Water Department

bd_5c34408bbd73cc88 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 30, 2019

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Aurora Water Department →

Aurora Water Department (City of Aurora, CO) notified customers of a third-party payment processing incident involving CentralSquare Technologies' Click2Gov system. Modified code captured payment card info and PII from customers who paid between Aug 30 and Oct 14, 2019. The site was taken down, forensics were engaged, and law enforcement was notified. Identity monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 30, 2019

Begins

Dec 30, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: City of Aurora
norm: city of aurora

Name: Aurora Water Department
norm: aurora water department
Industry: Governmentllm

Discovered: —
Breach occurred: Aug 30, 2019 – Oct 14, 2019
Materiality determined: —
Notification sent: Mar 29, 2020
Affected individuals: 1state-resident count only
Data types: PIIFinancial accountIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1056 Input Capture
Threat actor: ExternalFinancial
Third party: via CentralSquare Technologies
Initial access: supply_chain

During the incident: Launched an internal investigation
Retained a leading cybersecurity forensic firm to assist in our investigative process
Took the Click2Gov customer payment site down
Working with and continue to cooperate with law enforcement
Changes made: Continuing to review and enhance security measures
Transitioned fully to a different online bill payment processing system, called Paymentus
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notice-74.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2019
Raw hash: 9cab3418996d65b9422f279373e6c71f1831772d1778ba3c611115d35c168d9e

Reporting entityCity of Aurora

Victim entityAurora Water Department

IncidentThird-Party / Supply Chain

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov