HackingGovernmentGovernmentStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedAuthenticationCredentialsIdentity (basic)Government IDHighActive

City of Redmond

bd_df99f41cf0923b93 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 26, 2020

Filed

Jul 24, 2020

To disclose

28 days

Affected

2,851state residents only

Confidence

68%

Full breach record for City of Redmond →

City of Redmond notified Washington AG of a third-party breach involving Netsential.com's 'Blue Leaks' hack. Discovered June 26, 2020, the incident affected approx. 2,851 individuals, exposing PII (names, DOB, addresses, SSNs, driver's licenses) and credentials. FBI is investigating.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Jun 26, 2020

Discovered

Jul 24, 2020

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,851 affectedView incident

Name: City of Redmond
norm: city of redmond
Domain: redmond.gov

Name: City of Redmond
norm: city of redmond
Domain: redmond.gov
Industry: Governmentllm

Discovered: Jun 26, 2020
Materiality determined: —
Notification sent: Jun 25, 2020
Affected individuals: 2,851state-resident count only
Data types: AuthenticationCredentialsIdentity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence numberDate of birthUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Washington State Attorney GeneralBlue Leaks data breach is currently under investigation by the Federal Bureau of Investigation (FBI)
Third party: via Netsential.com
Initial access: supply_chain

During the incident: Contacted users via email to instruct them on security measures and to change their username and password
Issued a press release
Requested Netsential.com to delete all City of Redmond information from its databases and servers
Discontinued use of Netsential.com services
Offering a complimentary one-year membership of Experian’s IdentityWorks
Changes made: Discontinued use of Netsential.com services
Requested Netsential.com to purge all data from their records
Discussing additional measures to ensure highest level of security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10200.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 24, 2020
Raw hash: 0ebe0305f4f5eb450f3c3666ed7b622c3f557f2e47ec728d9b2d526196df31b3

Reporting entityCity of Redmond

Victim entityCity of Redmond

Incidentdiscovered Jun 26, 2020

Stated responseContacted users via email to instruct them on security measures and to change their username and password

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com