HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMINORMediumContained
City of McKinney, Texas
bd_b25eaab826de7792 · schema v1 · pii pii-v1
Full breach record for City of McKinney, Texas →City of McKinney, Texas notified Maryland AG of unauthorized network access by an unknown third party starting Oct 31, 2024. Discovered Nov 14, 2024. Impacted 4 Maryland residents with names, SSNs, driver's licenses, and DOBs. City engaged forensic consultants, notified law enforcement (FBI, DHS), and provided 12 months of credit monitoring.
Maryland clock⏱ MD AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9441cd0db25cfd7fVermont State AGfiled 2025-02-04Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376324.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- 1b72c94f18fa294d78a6ef3496a60613063d192d09e02db3943aec95d5bf6dd2
Reporting entity
- Name
- City of McKinney, Texasnorm: city of mckinney texas
- Domain
- mckinneytexas.org
Victim entity
- Name
- City of McKinney, Texasnorm: city of mckinney texas
- Domain
- mckinneytexas.org
Incident
- Discovered
- Nov 14, 2024
- Materiality determined
- —
- Notification sent
- Feb 4, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTMINOR
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.