HackingGovernmentGovernmentStolen CredentialsData MishandlingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryAuthenticationIdentity (basic)Government IDPIIHighContained

Snohomish County PUD No. 1

bd_ad7acc313857e63b · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 9, 2022

Filed

Dec 16, 2022

To disclose

14 weeks

Affected

1,132state residents only

Confidence

68%

Full breach record for Snohomish County PUD No. 1 →

Snohomish County PUD No. 1 reported a data incident involving fraudulent credit card applications issued to employees. The breach originated from a third-party background check vendor (BISI) between 2015 and 2019. Data compromised included names, SSNs, DOBs, and addresses. 1,132 individuals were potentially impacted. The incident was discovered on September 9, 2022.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d14 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2808 days

discovery → filing · 14 weeks / 98 days

Jan 1, 2015

Begins

Sep 9, 2022

Discovered

Dec 16, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,132 affectedView incident

Name: Snohomish County PUD No. 1
norm: snohomish county pud no 1
Industry: Government

Name: Snohomish County PUD No. 1
norm: snohomish county pud no 1
Industry: Government
Industry: Governmentllm

Discovered: Sep 9, 2022
Breach occurred: Jan 1, 2015 – Sep 24, 2019
Undetected for: 2,808 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,132state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: NameSocial Security numberDate of birthUsername + password
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified the Washington State Attorney General’s Office
Initial access: supply_chain

During the incident: Formed a Data Incident Team (DIT)
Established a restricted SharePoint site to collect and analyze data
Notified all employees about the potential data threat
Conducted interviews with impacted employees
Reviewed Human Resources systems and integrations
Reviewed Human Resources vendors
Sought District internal legal advice
Reported the incident to the Washington State Attorney General's Office
Reported the incident to the cyber insurance carrier (AEGIS)
Changes made: Recommended pursuing a conversation with the District’s background check vendor
Recommended asking the vendor to respond
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA16965.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2022
Raw hash: 54b8dde2475781e5419949015707f03cd27a5fe9d72d917bb2906e785b1b8c1b

Reporting entitySnohomish County PUD No. 1

Victim entitySnohomish County PUD No. 1

Incidentdiscovered Sep 9, 2022

Stated responseFormed a Data Incident Team (DIT)

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com