HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
City of Tucson, AZ
bd_7d660cc84e5dfe06 · schema v1 · pii pii-v1
Full breach record for City of Tucson, AZ →The City of Tucson, Arizona, notified the New Hampshire Attorney General of a data breach affecting approximately 123,500 individuals. The incident involved unauthorized access to city systems, resulting in the exfiltration of names, Social Security numbers, driver's license numbers, and passport numbers. The City provided one year of free credit monitoring through Experian to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2bf2cdcf1809778eCalifornia State AGfiled 2022-09-29(4d gap)Candidate
- bd_2f84f901a380587bWashington State AGfiled 2022-09-29(4d gap)Verified
- bd_88191b6f9a91212cMontana State AGfiled 2022-09-29(4d gap)Verified
- bd_a46baffbbf759cc1Maine State AGfiled 2022-09-29(4d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 4d gap
- bd_aab06bc719aecdfcOregon State AGfiled 2022-09-29(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/city-tucson-arizona-20221003.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2022
- Raw hash
- f3c54cab7870e82dba63f5e9f6fa552aaf240fc21719288392a839e149ac73b2
Reporting entity
- Name
- City of Tucson, AZnorm: city of tucson az
Victim entity
- Name
- City of Tucson, AZnorm: city of tucson az
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 123,500
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.