HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTCritical
City of Tucson, AZ
bd_a46baffbbf759cc1 · schema v1 · pii pii-v1
Full breach record for City of Tucson, AZ →The City of Tucson, Arizona, experienced an external system breach between May 17, 2022, and May 31, 2022. The incident, discovered on August 12, 2022, affected 123,513 individuals and resulted in the acquisition of names and Social Security Numbers. The city provided affected individuals with written notification and offered 12 months of credit monitoring services through Experian.
Maine clockDiscovered Aug 12, 2022 → Filed with AG Sep 29, 202248d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2bf2cdcf1809778eCalifornia State AGfiled 2022-09-29Candidate
- bd_2f84f901a380587bWashington State AGfiled 2022-09-29Verified
- bd_88191b6f9a91212cMontana State AGfiled 2022-09-29Verified
- bd_aab06bc719aecdfcOregon State AGfiled 2022-09-29Verified
Show 1 more filing ↓Show fewer ↑up to 4d gap
- bd_7d660cc84e5dfe06New Hampshire State AGfiled 2022-10-03(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d860ebbf-49e8-4e8f-ad8c-d7359c836c9b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2022
- Raw hash
- 58c81009d100b60f17673fd261e68ce6bf87ac22d47e539e8200236a88e7e9cf
Reporting entity
- Name
- City of Tucson, AZnorm: city of tucson az
Victim entity
- Name
- City of Tucson, AZnorm: city of tucson az
Incident
- Discovered
- Aug 12, 2022
- Materiality determined
- —
- Notification sent
- Sep 29, 2022
- Affected individuals
- 123,513
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 12, 2022→ Filed with AG: Sep 29, 202248d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.