HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICAUTHENTICATIONMediumContained

City of Wheat Ridge

bd_d207aed9af43826b · schema v1 · pii pii-v1

Full breach record for City of Wheat Ridge →

City of Wheat Ridge notified NH AG of a data security incident discovered on August 29, 2022, affecting 3 New Hampshire residents. The incident involved unauthorized access to network systems, potentially exposing names, SSNs, driver's license numbers, and medical/health insurance data. Wheat Ridge engaged forensic experts and the FBI, secured systems, and provided 24 months of identity protection services via IDX.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_8ff977e8af90c345Montana State AGfiled 2022-09-28Candidate
bd_a25b3676f3e89e52Maine State AGfiled 2022-10-05(7d gap)Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/city-wheat-ridge-20220928.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2022
Raw hash: fb5896018ec75e2e481dd5772ab0a2a46f39683726d5c91c59f4f3728df054f7

Reporting entity

Name: City of Wheat Ridge
norm: city of wheat ridge

Victim entity

Name: City of Wheat Ridge
norm: city of wheat ridge

Incident

Discovered: Aug 29, 2022
Materiality determined: —
Notification sent: Sep 28, 2022
Affected individuals: 3
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICAUTHENTICATION
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

Compliance

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.