MalwareGovernmentGovernmentRansomwareData EncryptedRansom DemandedPIIIdentity (basic)LowContained

County of Rock, WI

bd_e2cb16da706f862e · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 29, 2023

Filed

Dec 1, 2023

To disclose

9 weeks

Affected

3state residents only

Linked

5 filings

Confidence

62%

Full breach record for County of Rock, WI →2 incidents on file

The County of Rock, WI experienced a ransomware event between September 22 and 30, 2023, discovered on September 29, 2023. Unauthorized access resulted in system encryption and data acquisition. The County reported the incident to federal law enforcement and is offering complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 9 weeks / 63 days

Sep 22, 2023

Begins

Sep 29, 2023

Discovered

Dec 1, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_192453f7433b35f42023-12-01Verified
Maine State AGbd_330061d609509a562023-12-01Candidate
Massachusetts State AGbd_8c549586308eb7752023-12-01Verified
HHS OCRbd_d12bcaaf3e59647a2023-11-29 · +2dVerified

Name: County of Rock, WI
norm: county of rock wi

Name: County of Rock, WI
norm: county of rock wi
Industry: Governmentllm

Discovered: Sep 29, 2023
Breach occurred: Sep 22, 2023 – Sep 30, 2023
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this incident to federal law enforcement

During the incident: Reviewing and enhancing our existing policies and procedures related to network security
Reported this incident to federal law enforcement
Offering affected individuals access to complimentary credit monitoring
Changes made: Reviewing and enhancing our existing policies and procedures related to network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRNov 29 · first

Vermont State AG+2d

Maine State AG+2d

Massachusetts State AG+2d

Montana State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-900.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 1, 2023
Raw hash: 4b1063cb07cce4d190deec65cdb76250cd47d223e0a2642e94296b9d3e8024da

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCounty of Rock, WI

Victim entityCounty of Rock, WI

Incidentdiscovered Sep 29, 2023

Stated responseReviewing and enhancing our existing policies and procedures related to network security

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov