HackingGovernmentGovernmentStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDHealth (basic)Financial accountBiometricMediumContained

Sierra County, CA

bd_607449c086eba015 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 5, 2023

Filed

Nov 22, 2023

To disclose

37 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Sierra County, CA →

Sierra County, CA, notified individuals of a cybersecurity incident occurring on or about Feb 21, 2023, discovered March 5, 2023. The attack impacted PII including SSNs, driver's licenses, health info, financial data, and biometrics. The County engaged third-party experts, secured systems, and offered 12 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 37 weeks / 262 days

Feb 21, 2023

Begins

Mar 5, 2023

Discovered

Nov 22, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_857ee1ceedfe9e022023-11-21 · +1dCandidate

Name: Sierra County, CA
norm: sierra county ca

Name: Sierra County, CA
norm: sierra county ca
Industry: Governmentllm

Discovered: Mar 5, 2023
Breach occurred: Feb 21, 2023
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial accountBiometric
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took immediate steps to secure its systems
Conducted an extensive investigation with assistance from third-party experts
Arranged for Experian to provide 12 months of free credit monitoring services, identity restoration, and identity theft insurance
Changes made: Reviewed cybersecurity environment and taken reasonable steps to augment it to reduce the risk of a future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(262 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGNov 21 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-881.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2023
Raw hash: 458e2176ec3913f38fd8e1330fdb3f9f6eb61c1e1063b00f5a11f9fffc3784cb

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySierra County, CA

Victim entitySierra County, CA

Incidentdiscovered Mar 5, 2023

Stated responseTook immediate steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov