HackingGovernmentGovernmentStolen CredentialsEmployee Data InvolvedPIILowContained

City of Concord

bd_d3d20fe7b86a6f72 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 6, 2019

Filed

May 5, 2019

To disclose

—

Affected

1state residents only

Confidence

66%

City of Concord notified the NH Attorney General on May 9, 2019, of a security breach affecting one employee's personal information. The breach was discovered on May 6, 2019, and the employee was notified via telephone and written letter. The incident involved unauthorized access to personal information.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window not drawn

May 5, 2019

Filed

No interval is drawn: the discovery date on record falls after this filing's date.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: City of Concord
norm: concord
Domain: cheyennecity.org

Name: City of Concord
norm: concord
Domain: cityofconcord.org
Industry: Governmentllm

Discovered: May 6, 2019
Materiality determined: —
Notification sent: May 7, 2019
Affected individuals: 1state-resident count only
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed formal notification of security breach per 359-C:20
Initial access: valid_credentials

During the incident: Notified the affected employee on May 6, 2019 by telephone
Notified the affected employee in writing by letter dated May 7, 2019
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/concord-nh-20190509.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 5, 2019
Raw hash: 0c9b0f0a93e0e7317638ab6e848c34eae339728a611916b3b7302e8c90561c4e

Reporting entityCity of Concord

Victim entityCity of Concord

Incidentdiscovered May 6, 2019

Stated responseNotified the affected employee on May 6, 2019 by telephone

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov