HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
aikenhousing.org
bd_d1951a57abeb9839 · schema v1 · pii pii-v1
Full breach record for aikenhousing.org →Aiken Housing Authority notified the Maryland Attorney General of a security incident occurring June 23-24, 2024, where an unauthorized actor accessed systems and exfiltrated files containing names and Social Security numbers of 15 Maryland residents. The Authority engaged forensic experts, reset passwords, replaced compromised hardware, and provided 12 months of credit monitoring via IDX. Notification to residents began January 8, 2025.
Leak gap clock✗ Leak >180d17 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 508 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a939957e53c61313New Hampshire State AGfiled 2025-01-09(308d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376136.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- 6021c9873b37d306d4504cf51027cd3bcdeab72e49e1eeb3935c751cd2e8d380
Reporting entity
- Name
- Moore & Van Allen PLLCnorm: moore van allen
- Domain
- mvalaw.com
Victim entity
- Name
- aikenhousing.orgnorm: aikenhousingorg
- Domain
- aikenhousing.org
Incident
- Discovered
- Jun 23, 2024
- Materiality determined
- —
- Notification sent
- Jan 8, 2025
- Affected individuals
- 15
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified the Maryland Office of the Attorney GeneralNotified local and federal law enforcement agencies and state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 months(508 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.