PhysicalHealthcareGovernment IDIdentity (basic)MediumContained

City of Chicago

bd_99988f1871e8f2bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 16, 2009

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for City of Chicago →6 incidents on file

City of Chicago notified New Hampshire AG regarding a stolen laptop belonging to ambulance billing contractor DeZonia Group. The theft occurred on January 23, 2009. The laptop contained names and Social Security numbers of NH residents. The device was password-protected and encrypted. City provided credit monitoring services and implemented enhanced security measures including cable locks and additional encryption.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 23, 2009

Begins

Mar 16, 2009

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: City of Chicago
norm: city of chicago

Name: City of Chicago
norm: city of chicago

Discovered: —
Breach occurred: Jan 23, 2009
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Reported the incident to local law enforcement
Cooperated fully with law enforcement
Hired a private investigator to assist with the recovery of the laptop
Provided one year membership in Experian's Triple Alert credit monitoring service
Changes made: Installed further encryption protection on its laptops
Required laptops to be secured with laptop cable locks
Mandated additional training for its managers concerning data security matters
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chicago-20080316.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2009
Raw hash: 11ccbfedf2dbefafeb6cfefa4aead2b72de31b2e0baac1799e3f88f1ad741110

Reporting entityCity of Chicago

Victim entityCity of Chicago

IncidentUnauthorized Access

Stated responseReported the incident to local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov