HackingGovernmentGovernmentVulnerability ExploitStolen CredentialsTargetedData ExfiltratedFinancial accountIdentity (basic)LowContained

Village of Wellington

bd_8b581ca4e2832b49 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 5, 2018

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Village of Wellington →

The Village of Wellington (FL) notified the NH AG of unauthorized access to its Click2Gov payment system between Nov 2017 and Jun 2018. Payment card info and PII were exposed. One NH resident affected. Notices sent July 6, 2018. Third-party investigation conducted; additional security measures implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 28, 2017

Begins

Jul 5, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8cd69f241225d2a12018-07-06 · +1dVerified

Name: Village of Wellington
norm: village of wellington

Name: Village of Wellington
norm: village of wellington
Industry: Governmentllm

Discovered: —
Breach occurred: Nov 28, 2017 – Jun 4, 2018
Materiality determined: —
Notification sent: Jul 6, 2018
Affected individuals: 1state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralIn communication with the Florida Office of the Attorney GeneralReported the incident to the Palm Beach Sheriffs Office
Initial access: exploit_public_facing

During the incident: Undertook an independent third-party investigation
Implemented additional security measures designed to prevent the recurrence of such an attack
Reported the incident to the Palm Beach Sheriffs Office
Changes made: Implemented additional security measures designed to prevent a recurrence of such an attack
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJul 5 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wellington-village-20180705.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2018
Raw hash: a602f37ba92bd7ab0ebc05531e7fb885207cb4caf659845052addb0831f2fb78

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVillage of Wellington

Victim entityVillage of Wellington

IncidentUnauthorized Access

Stated responseUndertook an independent third-party investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov