HackingData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
St. Lucie County Tax Collector's Office
bd_b07011eb179ec5c3 · schema v1 · pii pii-v1
Full breach record for St. Lucie County Tax Collector's Office →St. Lucie County Tax Collector’s Office notified consumers of unauthorized network access between Oct 16-27, 2023. Files containing names and driver's license numbers were acquired by an unknown actor. The entity engaged forensic specialists, reported to law enforcement, and implemented additional safeguards. No specific count of affected individuals was provided in the notice.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 45 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4e5ff0a8dbf9c19aLeak Sitealphvfiled 2023-11-13(45d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_3287d0543d75ae4dMontana State AGfiled 2023-12-28Verified by operator
- bd_c255febf4c5222bcMaine State AGfiled 2023-12-28Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-28-st-lucie-county-tax-collectors-office-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2023
- Raw hash
- 9314b9bcc1834352bed2855cc36f3e838bbba34ebb11252cdf4d660c379371b4
Reporting entity
- Name
- St. Lucie County Tax Collector's Officenorm: st lucie county tax collector s office
- Domain
- tcslc.com
Victim entity
- Name
- St. Lucie County Tax Collector's Officenorm: st lucie county tax collector s office
- Domain
- tcslc.com
Incident
- Discovered
- Oct 27, 2023
- Materiality determined
- —
- Notification sent
- Dec 28, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- reported the event to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.