MalwareGovernmentGovernmentRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Upper Merion Township

bd_a4fecec24afa4c0e · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 9, 2024

Filed

Sep 25, 2024

To disclose

7 weeks

Affected · nationwide

2,9611 in this filing

Linked

7 records

Confidence

65%

Full breach record for Upper Merion Township →

Upper Merion Township (PA) reported a breach on Dec 27, 2023, discovered Aug 9, 2024, affecting 2,961 individuals including 1 Maine resident. Unauthorized access via malware resulted in acquisition of names and SSNs. The Township engaged law enforcement and cybersecurity professionals, enhanced security monitoring, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 226 days

discovery → filing · 7 weeks / 47 days

Dec 27, 2023

Begins

Aug 9, 2024

Discovered

Sep 25, 2024

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by qilin about this victim was first seen 228 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_4fff3189e4da91352024-01-15 · +254dCandidate

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_370202f8316b04562024-09-25Verified
Indiana State AGbd_8833350d87da4b712024-09-25Verified
Montana State AGbd_f2ada2a21b0816752024-09-25Verified
New Hampshire State AGbd_d092364ac345cdc92024-09-30 · +5dVerified by operator

Show 1 more filing ↓up to 21d gap

Massachusetts State AGbd_bd5c8875b48298d42024-10-16 · +21dVerified by operator

Name: Upper Merion Township
norm: upper merion township

Name: Upper Merion Township
norm: upper merion township
Industry: Governmentllm

Discovered: Aug 9, 2024
Breach occurred: Dec 27, 2023
Undetected for: 226 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 25, 2024
Affected individuals: 2,961state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: external_remote_services

During the incident: Commenced a prompt and thorough investigation
Worked closely with external cybersecurity professionals and law enforcement
Offered 12-months of single bureau credit monitoring through TransUnion
Changes made: Reviewed existing policies and training protocols relating to data protection
Enhanced security measures and monitoring tools to mitigate risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 47d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 9, 2024
→ Filed with AG: Sep 25, 2024
47d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 9, 2024 → Filed with AG: Sep 25, 2024	47d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGSep 25 · first

Indiana State AGSep 25 · first

Montana State AGSep 25 · first

Maine State AGSep 25 · first · this page

New Hampshire State AG+5d

Massachusetts State AG+21d

Pattern: first filing Sep 25 (VT), last Oct 16 (MA) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2d538c0d-3f42-44cc-a18d-c77fc2bc3d33.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2024
Raw hash: 9212feefbee8a6d762af93fc84d99ee374f4174299fb11b8505faae8fa0fff46

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityUpper Merion Township

Victim entityUpper Merion Township

Incidentdiscovered Aug 9, 2024

Stated responseCommenced a prompt and thorough investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov