MalwareGovernmentGovernmentRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDMediumContained

Spartanburg County, South Carolina

bd_cefbf06df9a287fd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 27, 2023

Filed

Jul 28, 2023

To disclose

13 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Spartanburg County, South Carolina →2 incidents on file

Spartanburg County, SC, notified residents of a ransomware attack detected on April 27, 2023. The incident involved exfiltration of personal data including names, DOBs, SSNs, and driver's license numbers. The County engaged forensic investigators, notified law enforcement, and offered 12 months of Experian credit monitoring. No data was found for sale on the Dark Web.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 92 days

Apr 27, 2023

Discovered

Jul 28, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

South Carolina State AGbd_8f44ec504b4a30152023-07-31 · +3dVerified
Maine State AGbd_5210ac25cc366aa32023-07-25 · +3dVerified
Indiana State AGbd_a1b6c0a791ad92292023-07-25 · +3dVerified
Massachusetts State AGbd_2c528a9abc3b9d932023-08-02 · +5dVerified

Show 1 more filing ↓up to 75d gap

Vermont State AGbd_319d00256855a8e42023-10-11 · +75dVerified

Name: Spartanburg County, South Carolina
norm: spartanburg county south carolina
Industry: government_public

Name: Spartanburg County, South Carolina
norm: spartanburg county south carolina
Industry: government_public
Industry: Governmentllm

Discovered: Apr 27, 2023
Materiality determined: —
Notification sent: Jul 28, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this to State and Federal law enforcementwill provide notice of this incident to all appropriate state regulators

During the incident: Hired a nationally recognized digital forensics firm
Reported this to State and Federal law enforcement
Began an investigation to understand what happened, contain the attack, and determine the scope of the incident
Worked with our team to secure our network, restore impacted systems, and begin an investigation
Searched Dark Web sources
Changes made: Conducted an enterprise-wide password reset with increased complexity requirements
Deployed security tools to enhance detection and accelerate response to cyber incidents
Working with third-party experts to enhance our cyber security
Strengthening security of existing County multi-factor authentication requirements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJul 25 · first

Indiana State AGJul 25 · first

Montana State AG+3d · this page

South Carolina State AG+6d

Massachusetts State AG+8d

Vermont State AG+78d

Pattern: first filing Jul 25 (ME), last Oct 11 (VT) — a 78-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-482.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2023
Raw hash: 69cf00a1a84605732428d771c549f87b18df3e4b807d1f9f30cf944ea28efdc5

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySpartanburg County, South Carolina

Victim entitySpartanburg County, South Carolina

Incidentdiscovered Apr 27, 2023

Stated responseHired a nationally recognized digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov