MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WSSC Water: Delivering the Essential
bd_70e2ab39b1c5177f · schema v1 · pii pii-v1
Full breach record for WSSC Water: Delivering the Essential →WSSC Water notified residents of a May 24, 2021 ransomware incident. While the virus was halted, unauthorized access occurred prior to the attack, exposing customer names and government IDs. WSSC reported to the FBI and MD AG, offered 5 years of credit monitoring, and is reviewing security policies. The incident was contained, and services were not impacted.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b9273b8e28594439South Carolina State AGfiled 2021-08-02(3d gap)Verified
- bd_99b0a93e4b4a2331California State AGfiled 2021-08-17(18d gap)Verified by operator
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/08/WSSC-Water-Courtesy-Notice-to-Residents.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 30, 2021
- Raw hash
- caeb934ce521122f9035d04006ea0a0728e2613714887f7c7a9ae1ce2721d543
Reporting entity
- Name
- WSSC Water: Delivering the Essentialnorm: wssc water delivering the essential
- Domain
- wsscwater.com
Victim entity
- Name
- WSSC Water: Delivering the Essentialnorm: wssc water delivering the essential
- Domain
- wsscwater.com
Incident
- Discovered
- May 24, 2021
- Materiality determined
- —
- Notification sent
- Jul 26, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this incident to the FBI and Maryland Attorney GeneralCooperate with any investigation by law enforcement
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.