MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Government IDMediumContained

Douglasville/Douglas County Water and Sewer Authority

bd_b335f10778e6439f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 26, 2024

Filed

Feb 20, 2025

To disclose

12 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Douglasville/Douglas County Water and Sewer Authority →

Douglasville/Douglas County Water and Sewer Authority reported a ransomware incident detected on November 26, 2024. Unauthorized access occurred Nov 24-25, 2024, resulting in file exfiltration. One Maryland resident's name and SSN were compromised. The entity engaged forensic consultants, notified law enforcement, and implemented security enhancements including MFA and password resets.

J jump to incidentP pin to compareR raw source

Maryland clock⏱ MD AG >30d12 weeks discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 12 weeks / 86 days

Nov 24, 2024

Begins

Nov 26, 2024

Discovered

Feb 20, 2025

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Douglasville/Douglas County Water and Sewer Authority
norm: douglasville douglas county water and sewer authority

Name: Douglasville/Douglas County Water and Sewer Authority
norm: douglasville douglas county water and sewer authority
Industry: Governmentllm

Discovered: Nov 26, 2024
Breach occurred: Nov 24, 2024 – Nov 25, 2024
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 20, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement and appropriate state and federal agenciesNotifying all appropriate state regulators

During the incident: Launched an investigation with assistance from nationally recognized cybersecurity and data forensics consultants
Notified law enforcement and appropriate state and federal agencies
Changes made: Deployed security tools to enhance detection and accelerate response to cyber incidents
Enhancement of policies and security measures related to document storage
Implemented a more complex password policy through an enterprise-wide password reset
Deployed a mandatory multi-factor authentication solution
Conducted an internal security access audit of all users
Engaged cybersecurity experts to advise on security improvements
Investment in hardware and system enhancements to further protect against cyber incidents
Provision of on-going cybersecurity education and training for employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: MD AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376388.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2025
Raw hash: adcb0b32e800c8d6c2792e756b4aac0c4264d74c6373be2ca5f7d21663f18d29

Reporting entityDouglasville/Douglas County Water and Sewer Authority

Victim entityDouglasville/Douglas County Water and Sewer Authority

Incidentdiscovered Nov 26, 2024

Stated responseLaunched an investigation with assistance from nationally recognized cybersecurity and data forensics consultants

ComplianceMD AG >30d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov