MalwareGovernmentGovernmentRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDMediumContained

County of Southampton, Virginia

bd_7b8ef347b58233db · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 6, 2022

Filed

Nov 21, 2022

To disclose

11 weeks

Affected

2state residents only

Linked

2 filings

Confidence

65%

Full breach record for County of Southampton, Virginia →

Southampton County, Virginia, experienced a ransomware incident on September 6, 2022, where a single server was encrypted. A cybercriminal claimed to have exfiltrated sensitive data, including names, SSNs, and driver's license numbers. No conclusive evidence of data theft was found, but the County notified law enforcement (FBI, VA State Police) and offered 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 76 days

Sep 6, 2022

Begins

Sep 6, 2022

Discovered

Nov 21, 2022

Filed

vs. sector median

on median

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_a2387883d9a898d72022-11-22 · +1dVerified

Name: County of Southampton, Virginia
norm: county of southampton virginia
Domain: southamptoncounty.org

Name: County of Southampton, Virginia
norm: county of southampton virginia
Domain: southamptoncounty.org
Industry: Governmentllm

Discovered: Sep 6, 2022
Breach occurred: Sep 6, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI Cyber Crimes DivisionNotified the Virginia State PoliceNotified the Virginia Fusion Center

During the incident: Took affected systems offline
Engaged outside security experts to conduct a thorough review of our environment
Notified the FBI Cyber Crimes Division, the Virginia State Police, and the Virginia Fusion Center
Changes made: Offering complimentary access to Experian IdentityWorks for 12 months
Continuing to evaluate additional actions to strengthen network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 21 · first · this page

Maine State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-733.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2022
Raw hash: ba60549e8e695e2f23301de62e0e9a69d20a5f9b44120db1832e3f3423cde9c4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCounty of Southampton, Virginia

Victim entityCounty of Southampton, Virginia

Incidentdiscovered Sep 6, 2022

Stated responseTook affected systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov