MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedRansom DemandedPIIIdentity (basic)LowContained

Wilkin County Health & Human Services

bd_db2952d465173e31 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 27, 2023

Filed

Dec 26, 2023

To disclose

9 weeks

Affected

Confidence

65%

Full breach record for Wilkin County Health & Human Services →

Clay County, Minnesota, on behalf of Wilkin County Health & Human Services, reported a ransomware attack on its CaseWorks network. Unauthorized access occurred Oct 23-26, 2023. One New Hampshire resident's PII was affected. Notices sent Dec 22, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 9 weeks / 60 days

Oct 23, 2023

Begins

Oct 27, 2023

Discovered

Dec 26, 2023

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Clay County Bank, Inc.
norm: clay county bank

Name: Wilkin County Health & Human Services
norm: wilkin county health human
Industry: Governmentllm

Discovered: Oct 27, 2023
Breach occurred: Oct 23, 2023 – Oct 26, 2023
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 1state + nationwide
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementNotified the Minnesota Department of Human ServicesProviding notice to the United States Department of Health and Human Services

During the incident: Began working with its local information technology partner to investigate
Worked with a nationally recognized digital forensics firm to assist with the investigation
Notified federal law enforcement
Notified the Minnesota Department of Human Services
Changes made: Implemented multi-factor authentication for any remote access to the CaseWorks application
Updated procedures related to external access by any vendors
Deployed security tools to enhance detection and accelerate response to cyber incidents
Enhancing technical security related to the CaseWorks application
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/clay-county-minnesota-wilkin-county-health-human-services-20231226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2023
Raw hash: 800d495f5e04fad154853197b297a69ff02cdae8fe1206055337dd01d1c37234

Reporting entityClay County Bank, Inc.

Victim entityWilkin County Health & Human Services

Incidentdiscovered Oct 27, 2023

Stated responseBegan working with its local information technology partner to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov