AccidentalMisconfigurationDelayed DiscoveryData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICMediumActive
Teton County
bd_e24a9cedf5ef8192 · schema v1 · pii pii-v1
Full breach record for Teton County →Teton County, Idaho, notified the Idaho Attorney General of a data breach involving a public records search portal. A configuration issue allowed unauthorized access to personal information, including Social Security numbers and driver's license numbers, for Idaho residents. The incident occurred between May 7, 2017, and January 11, 2022. The County engaged legal counsel and a forensic firm to investigate the scope and mitigate harm.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_01d42fb64e32fdf0Montana State AGfiled 2022-03-24(21d gap)Verified by operator
- bd_2a8942294ca6026fIdaho State AGfiled 2022-03-24(21d gap)Verified by operator
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/03/03-03-22-Teton-County.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2022
- Raw hash
- 26735a5f2e267f5bbc09434d9f37de7b07811bb7152dedbe920e05ced3c3d2e9
Reporting entity
- Name
- Teton Countynorm: teton county
- Domain
- co.teton.id.us
Victim entity
- Name
- Teton Countynorm: teton county
- Domain
- co.teton.id.us
Incident
- Discovered
- Jan 5, 2022
- Materiality determined
- —
- Notification sent
- Mar 4, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- Notified the Idaho Chief Information Security Officer (CISO) on January 5, 2022Providing weekly updates to the CISONotifying the Idaho Office of Risk Management, ITS Chief Information Officer, ITS CISO, and Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.