Social EngineeringGovernmentGovernmentPhishingCustomer Data InvolvedGovernment IDMediumActive

West Boise Sewer District

bd_7d2231fcde40bdc5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 3, 2023

Filed

Mar 7, 2023

To disclose

4 days

Affected

1state residents only

Confidence

67%

Full breach record for West Boise Sewer District →2 incidents on file

West Boise Sewer District notified the Idaho Attorney General of a phishing incident discovered on March 3, 2023. An employee received an unauthorized email requesting a direct deposit change. The scam resulted in one Idaho resident's Social Security number being provided to the threat actor. The District engaged legal counsel and a digital forensics firm, reported the incident to ICRMP, and is providing written notice and credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 days

Mar 3, 2023

Discovered

Mar 7, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: West Boise Sewer District
norm: west boise sewer district

Name: West Boise Sewer District
norm: west boise sewer district
Industry: Governmentllm

Discovered: Mar 3, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: reported the incident to ICRMP
Initial access: phishing_link

During the incident: Launched an internal investigation with the help of its IT company
Reported the incident to ICRMP
Engaged legal counsel with expertise in cybersecurity
Hiring a nationally-recognized cyber security and digital forensics firm to assist with the investigation
Notifying the Office of Risk Management, ITS Chief Information Security Officer and ITS Chief Information Officer
Providing written notice to this individual together with an offer of complimentary credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 days(4 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2023/03/3-7-2023-West-Boise-Sewer-District.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2023
Raw hash: ad8f503e893f833c7d4188bc3df31180487cb47be2279e134c718fbd21ea12df

Reporting entityWest Boise Sewer District

Victim entityWest Boise Sewer District

Incidentdiscovered Mar 3, 2023

Stated responseLaunched an internal investigation with the help of its IT company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov