The Civic Committee
bd_d9b42e4f23651bf9 · schema v1 · pii pii-v1
Full breach record for The Civic Committee →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group BianLian on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
The Civic Committee collaborates with business leaders, public officials, and civic organizations on initiatives to enhance the social and economic well-being of the region, focusing on key areas like public safety, education, state finance, technology, transportation, and business diversity.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Feb 2, 2025
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Indiana State AGbd_03a0d33fb732912c2025-03-27 · +53dVerified by operator
- New Hampshire State AGbd_2a9d724c0243a5912025-03-28 · +54dVerified by operator
- Massachusetts State AGbd_b7b42fa4aa8b611d2025-03-28 · +54dVerified by operator
- Illinois State AGbd_a0aea870add6bfa52025-04-01 · +58dVerified
Show 2 more filings ↓Show fewer ↑up to 445d gap
- Vermont State AGbd_3de334e80ca535ab2025-04-10 · +67dVerified by operator
- Maryland State AGbd_da82b357170807e52026-04-23 · +445dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Mar 27 (IN), last Apr 23 (MD) — a 392-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
bianlian
According to ransomware.live, BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.