MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Government IDMediumContained

The County Commissioners Association of Ohio

bd_9967d2c98bc434ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 14, 2023

Filed

Feb 23, 2024

To disclose

14 weeks

Affected

3state residents only

Linked

3 filings

Confidence

64%

Full breach record for The County Commissioners Association of Ohio →

The County Commissioners Association of Ohio (CCAO) disclosed a ransomware attack on November 14, 2023. Unauthorized access occurred, and cyber criminals removed files containing names and Social Security numbers. CCAO engaged forensic investigators, notified federal law enforcement, and is offering 12 months of Experian identity monitoring. No evidence of data release on the Dark Web was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 101 days

Nov 14, 2023

Begins

Nov 14, 2023

Discovered

Feb 23, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_c78acd87bc8b61ba2024-02-26 · +3dVerified
Indiana State AGbd_c35c5ea55ff8612e2023-12-29 · +56dVerified

Name: The County Commissioners Association of Ohio
norm: the county commissioners association of ohio

Name: The County Commissioners Association of Ohio
norm: the county commissioners association of ohio
Industry: Professional Servicesllm

Discovered: Nov 14, 2023
Breach occurred: Nov 14, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Providing notice of this incident to all appropriate state regulators

During the incident: Worked with a nationally recognized digital forensics firm to assist with our investigation
Notified federal law enforcement
Changes made: Working with third party experts to enhance our overall cyber security processes and procedures
Enhancing access controls relating to remote access to our network
Deploying security tools to enhance detection and accelerate response to cyber incidents
Moving on-site services to a cloud-based solution
Reducing storage of sensitive information on our network
Removing unnecessary network devices
Providing complimentary 12-month membership with Experian for identity monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGDec 29 · first

Montana State AG+56d · this page

New Hampshire State AG+59d

Pattern: first filing Dec 29 (IN), last Feb 26 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2024
Raw hash: 2f4892897711d9b43e45ffed447f30f3ec297bf515a237bb5ee6533348e687d3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe County Commissioners Association of Ohio

Victim entityThe County Commissioners Association of Ohio

Incidentdiscovered Nov 14, 2023

Stated responseWorked with a nationally recognized digital forensics firm to assist with our investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov