HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
St. Lucie County Tax Collector's Office
bd_c255febf4c5222bc · schema v1 · pii pii-v1
Full breach record for St. Lucie County Tax Collector's Office →St. Lucie County Tax Collector's Office (Florida) reported an external system breach (hacking) occurring on 10/16/2023 and discovered on 11/28/2023. The incident affected 22,403 individuals, including 21 Maine residents. Acquired data included names combined with driver's license numbers. Written notification was sent on 12/28/2023.
Leak gap clock⏱ Leak >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 45 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4e5ff0a8dbf9c19aLeak Sitealphvfiled 2023-11-13(45d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_3287d0543d75ae4dMontana State AGfiled 2023-12-28Verified by operator
- bd_b07011eb179ec5c3Vermont State AGfiled 2023-12-28Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0a52472b-fc7a-438e-a27b-ea9e4e3266a9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2023
- Raw hash
- 4d9af73f69da456fa513c863f9a68f022150f460071ceb3c015e91f1b88662db
Reporting entity
- Name
- St. Lucie County Tax Collector's Officenorm: st lucie county tax collector s office
- Domain
- tcslc.com
Victim entity
- Name
- St. Lucie County Tax Collector's Officenorm: st lucie county tax collector s office
- Domain
- tcslc.com
Incident
- Discovered
- Nov 28, 2023
- Materiality determined
- —
- Notification sent
- Dec 28, 2023
- Affected individuals
- 22,403
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 28, 2023→ Filed with AG: Dec 28, 202330d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.