HackingGovernmentGovernmentStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

City of Bettendorf, Iowa

bd_de63a0c4e7673285 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 27, 2020

Filed

Oct 28, 2020

To disclose

9 weeks

Affected

1state residents only

Linked

2 filings

Confidence

65%

Full breach record for City of Bettendorf, Iowa →

The City of Bettendorf, Iowa, notified individuals of a data security incident involving its third-party vendor, Technology Management Resources, Inc. (TMR). An unauthorized actor accessed TMR systems from June 1 to July 1, 2020, potentially viewing check images containing customer names, checking account numbers, and routing numbers. The City discovered the incident on August 27, 2020, upon notification from TBK Bank. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 87 days

discovery → filing · 9 weeks / 62 days

Jun 1, 2020

Begins

Aug 27, 2020

Discovered

Oct 28, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_f385920dd236e4ba2020-10-28Verified

Name: City of Bettendorf, Iowa
norm: city of bettendorf iowa

Name: City of Bettendorf, Iowa
norm: city of bettendorf iowa
Industry: Governmentllm

Discovered: Aug 27, 2020
Breach occurred: Jun 1, 2020 – Jul 1, 2020
Undetected for: 87 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notifying government regulators, as required
Initial access: valid_credentials

During the incident: Commenced an investigation to determine the nature and scope of the underlying event
Identified those individuals whose information was contained in the check images
Reviewing existing policies and procedures regarding third-party vendors
Working with TBK to evaluate additional measures and safeguards
Notifying government regulators
Changes made: Reviewing existing policies and procedures regarding third-party vendors
Evaluating additional measures and safeguards to protect against this type of incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGOct 28 · first

Montana State AGOct 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/dorfSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2020
Raw hash: 11fbaab40887455a19be462b950b81e20f3e7babed0fb20351aef3da952cbff7

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCity of Bettendorf, Iowa

Victim entityCity of Bettendorf, Iowa

Incidentdiscovered Aug 27, 2020

Stated responseCommenced an investigation to determine the nature and scope of the underlying event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov