HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Housing Authority of the City of Aiken

bd_d1951a57abeb9839 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 23, 2024

Filed

Nov 13, 2025

To disclose

—

Affected

15state residents only

Linked

6 filings

Confidence

66%

Full breach record for Housing Authority of the City of Aiken →

Aiken Housing Authority experienced a security incident on June 23, 2024, where an unauthorized actor accessed systems between June 23-24, 2024, and acquired files containing names and Social Security numbers of 15 Maryland residents. The incident was detected and contained immediately. Forensic investigation confirmed data exfiltration. The Authority reset passwords, replaced compromised hardware, upgraded security services, and is offering 12 months of credit monitoring via IDX. Notices were sent to affected residents in January 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Jun 23, 2024

Begins

Jun 23, 2024

Discovered

Nov 13, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_56e2192c8dfbc36b2024-06-23 · +508dVerified

Regulatory filings (4) · sorted by filing gap

South Carolina State AGbd_0078b132631d676c2025-01-09 · +308dCandidate
Massachusetts State AGbd_4977c615cf332fbf2025-01-09 · +308dVerified by operator
New Hampshire State AGbd_a939957e53c613132025-01-09 · +308dVerified
Nebraska State AGbd_0771534ee2edcea62025-01-08 · +309dVerified

Name: Aiken Housing Authority
norm: aiken housing authority
Domain: mvalaw.com

Name: Housing Authority of the City of Aiken
norm: housing authority of the city of aiken
Domain: aikenhousing.org
Industry: Governmentllm

Discovered: Jun 23, 2024
Breach occurred: Jun 23, 2024 – Jun 24, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2025
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified local and federal law enforcement agencies and state regulators

During the incident: Took measures to secure its network, systems, and data
Notified law enforcement and other government agencies
Enlisted the assistance of independent cybersecurity experts to conduct a forensic investigation
Reset the password for all accounts with access to its system
Replaced compromised machines and servers
Upgraded its security services
Providing access to 12 months of credit monitoring services through IDX at no cost
Establishing a call center to address questions regarding the event
Providing impacted individuals with guidance on how to protect themselves against identity theft and fraud
Providing affected individuals with information on how to place a fraud alert and security freeze
Notified, or is in the process of notifying, the relevant government authorities
Providing written notice to the major nationwide credit reporting agencies: Equifax, Experian, and TransUnion
Changes made: Working to review and revise its data management procedures to implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJan 8 · first

South Carolina State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+1d

Maryland State AG+309d · this page

Pattern: first filing Jan 8 (NE), last Nov 13 (MD) — a 309-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376136.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 6021c9873b37d306d4504cf51027cd3bcdeab72e49e1eeb3935c751cd2e8d380

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityAiken Housing Authority

Victim entityHousing Authority of the City of Aiken

Incidentdiscovered Jun 23, 2024

Stated responseTook measures to secure its network, systems, and data

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov