MalwareGovernmentGovernmentRansomwareData EncryptedTargetedPIIIdentity (basic)MediumContained

Spartanburg County, South Carolina

bd_8f44ec504b4a3015 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 27, 2023

Filed

Jul 31, 2023

To disclose

14 weeks

Affected

12,209state residents only

Linked

6 filings

Confidence

66%

Full breach record for Spartanburg County, South Carolina →2 incidents on file

Spartanburg County, SC, notified individuals of a ransomware attack detected on April 27, 2023. The incident involved unauthorized access and data exfiltration from the County's network. The County engaged forensic investigators and law enforcement. Affected data included personal information. The County offered 12 months of Experian credit monitoring and identity restoration services to impacted individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 14 weeks / 95 days

Apr 27, 2023

Discovered

Jul 31, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_2c528a9abc3b9d932023-08-02 · +2dVerified
Montana State AGbd_cefbf06df9a287fd2023-07-28 · +3dCandidate
Maine State AGbd_5210ac25cc366aa32023-07-25 · +6dVerified
Indiana State AGbd_a1b6c0a791ad92292023-07-25 · +6dVerified

Show 1 more filing ↓up to 72d gap

Vermont State AGbd_319d00256855a8e42023-10-11 · +72dVerified

Name: Spartanburg County, South Carolina
norm: spartanburg county south carolina

Name: Spartanburg County, South Carolina
norm: spartanburg county south carolina
Industry: Governmentllm

Discovered: Apr 27, 2023
Materiality determined: —
Notification sent: Oct 11, 2023
Affected individuals: 12,209state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: reported this to State and Federal law enforcementwill provide notice of this incident to all appropriate state regulators

During the incident: Hired a nationally recognized digital forensics firm
Reported this to State and Federal law enforcement
Began an investigation to understand what happened, contain the attack, and determine the scope of the incident
Worked with our team to secure our network, restore impacted systems, and begin an investigation
Searched Dark Web sources
Changes made: Conducted an enterprise-wide password reset with increased complexity requirements
Deployed security tools to enhance detection and accelerate response to cyber incidents
Working with third-party experts to enhance our cyber security
Strengthening security of existing County multi-factor authentication requirements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(95 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJul 25 · first

Indiana State AGJul 25 · first

Montana State AG+3d

South Carolina State AG+6d · this page

Massachusetts State AG+8d

Vermont State AG+78d

Pattern: first filing Jul 25 (ME), last Oct 11 (VT) — a 78-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/SpartanburgCounty.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2023
Raw hash: cee0571dbf4692cc60913936e71690b5e53f5a4bd11720bea16db52249f569ec

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySpartanburg County, South Carolina

Victim entitySpartanburg County, South Carolina

Incidentdiscovered Apr 27, 2023

Stated responseHired a nationally recognized digital forensics firm

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov