HackingGovernmentGovernmentVulnerability ExploitData ExfiltratedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDCriticalContained

Dallas County, Texas

bd_913288442db45729 · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Jul 10, 2024

To disclose

—

Affected · nationwide

201,4041 in this filing

Linked

8 records

Confidence

66%

Full breach record for Dallas County, Texas →2 incidents on file

Dallas County, Texas reported an external system breach (hacking) occurring between October 16-20, 2023, discovered on June 27, 2024. Approximately 201,404 individuals were affected, including 1 Maine resident. Impacted data included names and Social Security Numbers. The County engaged forensic specialists, deployed EDR, forced password resets, and offered 24 months of identity protection services via IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Oct 16, 2023

Begins

Jul 10, 2024

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by play about this victim was first seen 256 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_1b62d05ca632c2de2023-10-19 · +265dVerified by operator

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_07372230281d08372024-07-10Candidate
Montana State AGbd_246dfc2f7a895ec52024-07-10Verified
Indiana State AGbd_81d5f68b0d2e343b2024-07-10Verified
New Hampshire State AGbd_5699888e7c7a051a2024-07-15 · +5dVerified

Show 2 more filings ↓up to 205d gap

Massachusetts State AGbd_75d364f0d461aed92024-07-15 · +5dVerified by operator
HHS OCRbd_8e8641237987b1dc2023-12-18 · +205dVerified by operator

Name: Dallas County, Texas
norm: dallas county texas
Domain: dallascounty.org

Name: Dallas County, Texas
norm: dallas county texas
Domain: dallascounty.org
Industry: Governmentllm

Discovered: —
Breach occurred: Oct 16, 2023 – Oct 20, 2023
Materiality determined: —
Notification sent: Jul 10, 2024
Affected individuals: 201,404state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Engaged third-party cybersecurity specialists to perform a comprehensive investigation
Established a dedicated call center for individuals
Initiated measures to secure its information
Deployed an Endpoint Detection and Response (EDR) tool across servers and endpoints
Forced password changes for all users
Blocked ingress and egress traffic to IP addresses identified as malicious
Changes made: Deployed an Endpoint Detection and Response (EDR) tool across servers and endpoints connected to our network
Forced password changes for all users to grant access to our systems
Blocked ingress and egress traffic to IP addresses identified as malicious
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

HHS OCRDec 18 · first

Vermont State AG+205d

Montana State AG+205d

Indiana State AG+205d

Maine State AG+205d · this page

New Hampshire State AG+210d

Massachusetts State AG+210d

Pattern: first filing Dec 18 (TX), last Jul 15 (MA) — a 210-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/31906630-6e37-40e0-828c-e094feb7bcd7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2024
Raw hash: 315521d3660ee691769d1fda41caf48e2503ae907bf4e3e111cf0a317a6b9318

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityDallas County, Texas

Victim entityDallas County, Texas

IncidentUnauthorized Access

Stated responseEngaged third-party cybersecurity specialists to perform a comprehensive investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov