HackingGovernmentGovernmentStolen CredentialsSkimmerSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Financial accountPIIMediumContained

The City of Sioux City, Iowa

bd_a84d9de7ba27168a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 17, 2020

To disclose

—

Affected

3,563

Linked

2 filings

Confidence

66%

Full breach record for The City of Sioux City, Iowa →

City of Sioux City, Iowa notified Washington AG of a breach affecting 3,563 accounts via its third-party vendor Click2Gov. Malicious code inserted into the payment portal captured payment card info, names, and addresses between Aug 26 and Sep 18, 2019. Notices sent Jan 17, 2020; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 26, 2019

Begins

Jan 17, 2020

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

South Carolina State AGbd_c4bffa1ffa9dec6c2020-02-06 · +20dCandidate

Name: The City of Sioux City, Iowa
norm: the city of sioux city iowa
Domain: sioux-city.org

Name: The City of Sioux City, Iowa
norm: the city of sioux city iowa
Domain: sioux-city.org
Industry: Governmentllm

Discovered: —
Breach occurred: Aug 26, 2019 – Sep 18, 2019
Materiality determined: —
Notification sent: Jan 17, 2020
Affected individuals: 3,563nationwide
Data types: Identity (basic)Financial accountPII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Washington Attorney General's Office
Initial access: exploit_public_facing

During the incident: Launched an investigation to determine its full nature and scope
Engaged third-party forensic investigators
Worked with the third-party vendor to ensure the security of the Click2Gov website
Took steps to confirm and further strengthen the security of our systems
Engaged a different third-party vendor to process credit card payments
Notified law enforcement regarding any criminal investigation
Directly notifying those individuals whose payment information may be impacted
Sent notice via letter to potentially impacted individuals
Provided free credit monitoring through TransUnion for twelve months
Changes made: Strengthened the security of our systems, including our online utilities payment portal
Continuing to review our security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Washington State AGJan 17 · first · this page

South Carolina State AG+20d

Pattern: first filing Jan 17 (WA), last Feb 6 (SC) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 17, 2020
Raw hash: 38a06dcc5c3d73da3e54585361b9c01388f052b47492e98d2bb2d02f132c8383

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe City of Sioux City, Iowa

Victim entityThe City of Sioux City, Iowa

IncidentThird-Party / Supply Chain

Stated responseLaunched an investigation to determine its full nature and scope

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com