HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Wichita County, Texas

bd_937b1fcb3cbb8c3e · schema v1 · pii pii-v1

Severity

High

Discovered

May 7, 2024

Filed

Oct 24, 2024

To disclose

7 weeks

Affected · nationwide

47,7846 in this filing

Linked

6 filings

Confidence

66%

Full breach record for Wichita County, Texas →

Wichita County, Texas, reported a network disruption on May 7, 2024, which was determined to be an unauthorized access incident on September 3, 2024. The breach affected approximately 47,784 individuals, including 6 Maine residents. Compromised data included names, addresses, dates of birth, Social Security numbers, and driver's license numbers. Wichita County engaged forensic experts, implemented additional security measures, and offered credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 7, 2024 → Filed with AG Oct 24, 2024170d ⏱ ME AG >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 24 weeks / 170 days

May 7, 2024

Begins

May 7, 2024

Discovered

Oct 24, 2024

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_00bcabbf04169abb2024-10-24Verified
Massachusetts State AGbd_03eef18a209110032024-10-24Verified
Indiana State AGbd_24ab646656674b882024-10-22 · +2dVerified
Montana State AGbd_4d1d3d4f2887ab7c2024-10-22 · +2dCandidate

Show 1 more filing ↓up to 2d gap

Vermont State AGbd_a9e8e2e657b9115d2024-10-22 · +2dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Wichita County, Texas
norm: wichita county texas
Industry: Governmentllm

Discovered: May 7, 2024
Breach occurred: May 7, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 22, 2024
Affected individuals: 47,784state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General's Office
Initial access: exploit_public_facing

During the incident: Initiated an investigation with the assistance of independent forensic experts
Engaged an independent team to perform a comprehensive review of all data involved
Worked diligently to obtain missing address information to effectuate notification to affected individuals
Set up the services being offered
Posted conspicuous notice of the incident on the home page of its website
Providing individuals with information about steps that they can take to help protect their personal information
Offering eligible individuals complimentary identity protection services
Changes made: Implemented additional technical security measures throughout the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: ME AG >30d · 170dME resident >60d · 168d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 7, 2024
→ Filed with AG: Oct 24, 2024
170d 30 days (soft) ME AG >30d
Maine
Discovered: May 7, 2024
→ Notified: Oct 22, 2024
168d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 7, 2024 → Filed with AG: Oct 24, 2024	170d	30 days (soft)	ME AG >30d
Maine	Discovered: May 7, 2024 → Notified: Oct 22, 2024	168d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGOct 22 · first

Montana State AGOct 22 · first

Vermont State AGOct 22 · first

New Hampshire State AG+2d

Massachusetts State AG+2d

Maine State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/95108442-e6bd-4a9f-a9fc-0440c999601a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2024
Raw hash: 385a69b3bb65abcaa53887465b4c25b5634f13e474c3bf8be716b57a70968375

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityWichita County, Texas

Incidentdiscovered May 7, 2024

Stated responseInitiated an investigation with the assistance of independent forensic experts

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov