MalwareGovernmentGovernmentRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

City of Coeur D’Alene

bd_72bfcc5537879ab8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2024

Filed

Mar 14, 2024

To disclose

5 weeks

Affected

57state residents only

Linked

4 filings

Confidence

66%

Full breach record for City of Coeur D’Alene →

The City of Coeur D’Alene, Idaho, reported a ransomware attack detected on February 11, 2024, involving unauthorized access between February 4 and 11. The incident resulted in the exfiltration of personal information, including names, Social Security numbers, and driver's license numbers, affecting 57 Idaho residents. The City engaged forensic investigators, cooperated with federal law enforcement, and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 5 weeks / 32 days

Feb 4, 2024

Begins

Feb 11, 2024

Discovered

Mar 14, 2024

Filed

vs. sector median

6 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_45d50c9eb102b57b2024-03-12 · +2dVerified
Indiana State AGbd_d16c8046e347882a2024-03-12 · +2dVerified
Idaho State AGbd_e02fb815284202cf2024-02-14 · +29dCandidate

Name: City of Coeur D’Alene
norm: city of coeur d alene

Name: City of Coeur D’Alene
norm: city of coeur d alene
Industry: Governmentllm

Discovered: Feb 11, 2024
Breach occurred: Feb 4, 2024 – Feb 11, 2024
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2024
Affected individuals: 57state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: provided notice of this incident and regular updates to the Idaho Chief Information Security Officer and other state regulators

During the incident: Began an investigation, with the assistance of legal counsel and a nationally-recognized cyber security and digital forensics firm
Cooperated with Federal law enforcement’s investigation
Conducted a thorough review of the City data
Provided written notice to a total of fifty-seven (57) residents of Idaho
Provided notice of this incident and regular updates to the Idaho Chief Information Security Officer and other state regulators
Changes made: Deploying security tools to enhance detection and accelerate response to cyber incidents
Conducted enterprise-wide password reset
Investing in hardware and system enhancements to further protect against cyber incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Idaho State AGFeb 14 · first

Montana State AG+27d

Indiana State AG+27d

Idaho State AG+29d · this page

Pattern: first filing Feb 14 (ID), last Mar 14 (ID) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2024/03/3-14-2024-City-of-Coeur-DAlene.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2024
Raw hash: 2be5bc08d3d9881e63431efb62b38d0b8896eccca01cc1a63bd6bb234e150bc3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCity of Coeur D’Alene

Victim entityCity of Coeur D’Alene

Incidentdiscovered Feb 11, 2024

Stated responseBegan an investigation, with the assistance of legal counsel and a nationally-recognized cyber security and digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov