Social EngineeringGovernmentGovernmentPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Lehigh County Housing Authority

bd_a324dcb3d1f9849e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 7, 2021

Filed

Mar 15, 2021

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Lehigh County Housing Authority →

Lehigh County Housing Authority experienced a data security incident on or about July 7, 2021, involving the compromise of an employee's email account. Potentially exposed data included names, addresses, SSNs, driver's license numbers, and financial account/routing numbers. The organization engaged cybersecurity counsel and provided 12-24 months of identity theft protection services through IDX to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 15, 2021

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_41503d4c7f9ad2d42022-03-17 · +367dVerified

Name: Lehigh County Housing Authority
norm: lehigh county housing authority

Name: Lehigh County Housing Authority
norm: lehigh county housing authority
Industry: Governmentllm

Discovered: Jul 7, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Working with cybersecurity counsel to determine the actions to take in response to the incident
Investigating and closely monitoring the situation
Taking steps to strengthen security posture
Arranged for complementary identity theft protection services through IDX
Changes made: Taking steps to strengthen security posture to prevent a similar event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGMar 15 · first · this page

New Hampshire State AG+367d

Pattern: first filing Mar 15 (MT), last Mar 17 (NH) — a 367-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Lehigh-County-Housing-Authority-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 15, 2021
Raw hash: c20f4b146d4414e0bcc624269628e82a8d8a57cf10a1e1d566426096b57509e3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLehigh County Housing Authority

Victim entityLehigh County Housing Authority

Incidentdiscovered Jul 7, 2021

Stated responseWorking with cybersecurity counsel to determine the actions to take in response to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov