MalwareGovernmentTransportation & LogisticsGovernmentRansomwareStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainIdentity (basic)Government IDHealth (basic)PHIHighContained

Pierce County Public Transportation Benefit Area Corporation

bd_a408c5ae2631dbbe · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 14, 2023

Filed

Apr 28, 2023

To disclose

10 weeks

Affected

2,145state residents only

Confidence

69%

Full breach record for Pierce County Public Transportation Benefit Area Corporation →

Pierce Transit (Pierce County Public Transportation Benefit Area Corporation) filed a supplemental notice with the Washington AG regarding a ransomware incident discovered on Feb 14, 2023. The breach affected 2,145 Washington residents, exposing names, DOBs, SSNs, driver's licenses, and PHI. The organization engaged forensic experts, secured systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d10 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 10 weeks / 73 days

Feb 11, 2023

Begins

Feb 14, 2023

Discovered

Apr 28, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,145 affectedView incident

Name: Pierce County Public Transportation Benefit Area Corporation
norm: pierce county public transportation benefit area

Name: Pierce County Public Transportation Benefit Area Corporation
norm: pierce county public transportation benefit area
Also named: Pierce County Public Transportation Benefit Area Corporationdba oflegal entity
Pierce Transitdba oftrade name
Industry: GovernmentllmTransportation & Logisticsllm

Discovered: Feb 14, 2023
Breach occurred: Feb 11, 2023 – Feb 14, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 25, 2023
Affected individuals: 2,145state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: NameSocial Security numberDriver's licence numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Consumer Protection Division
Initial access: valid_credentials

During the incident: Engaged independent cybersecurity experts to help it conduct an investigation
Took steps to secure its digital environment
Launched a comprehensive review of the potentially affected data
Established a toll-free call center to answer any questions about the incident
Offering twelve months of complimentary credit monitoring services
Changes made: Implemented measures to enhance the security of its environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA22934.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2023
Raw hash: 8bf751b348b6d4aa54d054fba624fbcd00965627d3d36ccefd54e505368f39d0

Reporting entityPierce County Public Transportation Benefit Area Corporation

Victim entityPierce County Public Transportation Benefit Area Corporation

Incidentdiscovered Feb 14, 2023

Stated responseEngaged independent cybersecurity experts to help it conduct an investigation

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com