HackingGovernmentGovernmentTargetedPIIMediumContained

City of Clemson South Carolina

bd_8ee4a8c63331c39e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 18, 2023

Filed

Feb 8, 2024

To disclose

16 weeks

Affected

20,255state residents only

Linked

7 filings

Confidence

63%

Full breach record for City of Clemson South Carolina →

The City of Clemson, SC, notified residents of a data security incident discovered on October 18, 2023, involving unauthorized access to City data. The City engaged cybersecurity experts and notified the FBI. The investigation concluded on February 2, 2024, identifying affected individuals. The City is offering complimentary credit monitoring and identity protection services through IDX.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due16 weeks discovery → filing

Incident timeline

discovery → filing · 16 weeks / 113 days

Oct 18, 2023

Begins

Oct 18, 2023

Discovered

Feb 8, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_0451f020d626b0282024-02-08Verified
Montana State AGbd_28e9d2fd7e89ad482024-02-07 · +1dCandidate
New Hampshire State AGbd_679387908459384d2024-02-07 · +1dVerified
Indiana State AGbd_93efd54c7920a1f62024-02-07 · +1dVerified

Show 2 more filings ↓up to 1d gap

Maine State AGbd_b63f125474be51ee2024-02-07 · +1dVerified
Vermont State AGbd_eb5b845c060547cb2024-02-07 · +1dVerified

Name: City of Clemson South Carolina
norm: city of clemson south carolina

Name: City of Clemson South Carolina
norm: city of clemson south carolina
Industry: Governmentllm

Discovered: Oct 18, 2023
Breach occurred: Oct 18, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 7, 2024
Affected individuals: 20,255state-resident count only
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged cybersecurity experts to assist with the process
Notified the Federal Bureau of Investigation
Offering identity theft protection services through IDX
Changes made: Implemented measures to enhance network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGFeb 7 · first

New Hampshire State AGFeb 7 · first

Indiana State AGFeb 7 · first

Maine State AGFeb 7 · first

Vermont State AGFeb 7 · first

Massachusetts State AG+1d

South Carolina State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/CityofClemsonSouthCarolina.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 8, 2024
Raw hash: 358598b28a5abc2fe56261461ceb0e08cc549fbb5037b29f112f493c618b8548

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityCity of Clemson South Carolina

Victim entityCity of Clemson South Carolina

Incidentdiscovered Oct 18, 2023

Stated responseEngaged cybersecurity experts to assist with the process

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov