MalwareGovernmentGovernmentRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Cuyahoga Metropolitan Housing Authority

bd_9ebe0d253d484353 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2021

Filed

Apr 12, 2021

To disclose

9 weeks

Affected

2state residents only

Linked

6 filings

Confidence

66%

Full breach record for Cuyahoga Metropolitan Housing Authority →

Cuyahoga Metropolitan Housing Authority (CMHA) notified individuals of a ransomware attack discovered on February 10, 2021. Files were encrypted and inaccessible. CMHA confirmed unauthorized access to servers potentially containing names, addresses, SSNs, driver's license numbers, and financial information. No evidence of misuse was found. CMHA launched an investigation, secured systems, and implemented additional safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 61 days

Feb 10, 2021

Discovered

Apr 12, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedoppelpaymerbd_9453ddf5554e4d6b2021-02-08 · +63dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_914bb72079e39bd02021-04-12Verified
Massachusetts State AGbd_9c0a02f2a8ebd0eb2021-04-13 · +1dCandidate
Indiana State AGbd_ed31bd159e9530f12021-04-09 · +3dVerified by operator
New Hampshire State AGbd_f05a856a0ae8daea2021-05-03 · +21dVerified

Name: Cuyahoga Metropolitan Housing Authority
norm: cuyahoga metropolitan housing authority
Domain: cmha.net

Name: Cuyahoga Metropolitan Housing Authority
norm: cuyahoga metropolitan housing authority
Domain: cmha.net
Industry: Governmentllm

Discovered: Feb 10, 2021
Materiality determined: —
Notification sent: Apr 12, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Immediately launched an investigation
Took steps to secure our systems
Working to review our existing policies and procedures and implement additional safeguards
Notify consumer reporting agencies
Changes made: Review our existing policies and procedures and implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGApr 9 · first

Maine State AG+3d

Montana State AG+3d · this page

Massachusetts State AG+4d

New Hampshire State AG+24d

Pattern: first filing Apr 9 (IN), last May 3 (NH) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/CMHA-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2021
Raw hash: 156aa3395850ecac49124416857cbfa17bef7f0a0b5419d2e82a49d453bbe6f5

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityCuyahoga Metropolitan Housing Authority

Victim entityCuyahoga Metropolitan Housing Authority

Incidentdiscovered Feb 10, 2021

Stated responseImmediately launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov