MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Douglasville/Douglas County Water and Sewer Authority
bd_b335f10778e6439f · schema v1 · pii pii-v1
Full breach record for Douglasville/Douglas County Water and Sewer Authority →Douglasville/Douglas County Water and Sewer Authority reported a ransomware incident detected on November 26, 2024. Unauthorized access occurred Nov 24-25, 2024, resulting in file exfiltration. One Maryland resident's name and SSN were compromised. The entity engaged forensic consultants, notified law enforcement, and implemented security enhancements including MFA and password resets.
Maryland clock⏱ MD AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376388.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2025
- Raw hash
- adcb0b32e800c8d6c2792e756b4aac0c4264d74c6373be2ca5f7d21663f18d29
Reporting entity
- Name
- Douglasville/Douglas County Water and Sewer Authoritynorm: douglasville douglas county water and sewer authority
Victim entity
- Name
- Douglasville/Douglas County Water and Sewer Authoritynorm: douglasville douglas county water and sewer authority
Incident
- Discovered
- Nov 26, 2024
- Materiality determined
- —
- Notification sent
- Feb 20, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement and appropriate state and federal agenciesNotifying all appropriate state regulators
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.