HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

City of Roseburg

bd_7bb17fc583466c29 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 4, 2024

Filed

Feb 14, 2025

To disclose

28 weeks

Affected

2state residents only

Linked

7 filings

Confidence

66%

Full breach record for City of Roseburg →

The City of Roseburg notified the Maryland Attorney General of a data security incident where unauthorized access occurred on August 4, 2024. The City engaged cybersecurity experts and determined that files containing names, Social Security numbers, and driver's license numbers may have been acquired without authorization. Two Maryland residents were affected. The City implemented additional security measures and offered 12 months of credit monitoring and identity theft recovery services.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d28 weeks discovery → filing

Incident timeline

discovery → filing · 28 weeks / 194 days

Aug 4, 2024

Begins

Aug 4, 2024

Discovered

Feb 14, 2025

Filed

vs. sector median

+17 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_25dfa3f564a47e542025-02-14Verified
Nebraska State AGbd_65da64edc29e61c52025-02-14Verified
Montana State AGbd_7829576727507b412025-02-14Candidate
Oregon State AGbd_b84397ca785519ce2025-02-14Verified by operator

Show 2 more filings ↓up to 1d gap

Indiana State AGbd_f4155eaae3c819502025-02-14Verified
Massachusetts State AGbd_0efd7ddfe9a51dda2025-02-15 · +1dVerified

Name: The City of Roseburg
norm: city of roseburg

Name: City of Roseburg
norm: city of roseburg
Industry: Governmentllm

Discovered: Aug 4, 2024
Breach occurred: Aug 4, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 14, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Maryland Attorney General

During the incident: Initiated an investigation of the matter
Engaged independent cybersecurity experts to assist with the process
Undertook a comprehensive review of those files
Implemented additional security measures to prevent a similar incident from occurring in the future
Offered notified individuals 12 months of complimentary services through IDX, which includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, and fully managed identity theft recovery services
Changes made: Implemented additional security measures to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

New Hampshire State AGFeb 14 · first

Nebraska State AGFeb 14 · first

Montana State AGFeb 14 · first

Oregon State AGFeb 14 · first

Indiana State AGFeb 14 · first

Maryland State AGFeb 14 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376359.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 14, 2025
Raw hash: 5e559168f5a836060afe4b95f725dc3876196573e1e6c6f67a98ed93dd7fb58d

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe City of Roseburg

Victim entityCity of Roseburg

Incidentdiscovered Aug 4, 2024

Stated responseInitiated an investigation of the matter

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov