HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

Housing Authority of the City of Aiken

bd_a939957e53c61313 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 23, 2024

Filed

Jan 9, 2025

To disclose

29 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for Housing Authority of the City of Aiken →

Aiken Housing Authority notified the NH Attorney General of a security incident where an unauthorized actor accessed systems between June 23-24, 2024, acquiring files containing personal information of three New Hampshire residents. The incident was detected and contained on June 23, 2024. Forensic investigation confirmed data exfiltration. The Authority engaged cybersecurity experts, notified law enforcement, and is offering identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d29 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 29 weeks / 200 days

Jun 23, 2024

Begins

Jun 23, 2024

Discovered

Jan 9, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_56e2192c8dfbc36b2024-06-23 · +200dVerified

Regulatory filings (4) · sorted by filing gap

South Carolina State AGbd_0078b132631d676c2025-01-09Candidate
Massachusetts State AGbd_4977c615cf332fbf2025-01-09Verified by operator
Nebraska State AGbd_0771534ee2edcea62025-01-08 · +1dVerified
Maryland State AGbd_d1951a57abeb98392025-11-13 · +308dVerified

Name: Housing Authority of the City of Aiken
norm: housing authority of the city of aiken
Domain: aikenhousing.org

Name: Housing Authority of the City of Aiken
norm: housing authority of the city of aiken
Domain: aikenhousing.org
Industry: Governmentllm

Discovered: Jun 23, 2024
Breach occurred: Jun 23, 2024 – Jun 24, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified local and federal law enforcement agencies and state regulators

During the incident: Took measures to secure the network, systems, and data
Notified law enforcement and other government agencies
Enlisted the assistance of independent cybersecurity experts to conduct a forensic investigation
Conducted a comprehensive programmatic and manual review of all involved data
Changes made: Reviewing existing policies and procedures
Enhanced its technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJan 8 · first

South Carolina State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+1d · this page

Maryland State AG+309d

Pattern: first filing Jan 8 (NE), last Nov 13 (MD) — a 309-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aiken-housing-authority-20250109.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2025
Raw hash: 375380aed5a3b9c3b39e612cddc8371a03cd62254e3fe9ff013fff17c5bc9694

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityHousing Authority of the City of Aiken

Victim entityHousing Authority of the City of Aiken

Incidentdiscovered Jun 23, 2024

Stated responseTook measures to secure the network, systems, and data

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov