HackingGovernmentGovernmentTargetedIdentity (basic)Government IDMediumContained

City of New Bedford, Massachusetts

bd_eebf7cd55de15a37 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 5, 2019

Filed

Dec 2, 2019

To disclose

21 weeks

Affected

2state residents only

Linked

3 records

Confidence

67%

Full breach record for City of New Bedford, Massachusetts →

The City of New Bedford, MA, notified the NH AG of a data event affecting 2 NH residents. Unauthorized actors accessed servers/devices containing names and SSNs. Discovered July 5, 2019; notification sent Nov 27, 2019. Forensic experts engaged; law enforcement notified; 18 months credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 150 days

Jul 5, 2019

Discovered

Dec 2, 2019

Filed

This filing is one of 3 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteryukbd_7d231d69cba5085f2019-07-04 · +151dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_bae278951c741de22019-11-27 · +5dVerified by operator

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: City of New Bedford, Massachusetts
norm: city of new bedford massachusetts
Industry: Governmentllm

Discovered: Jul 5, 2019
Materiality determined: —
Notification sent: Nov 27, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported this incident to law enforcement

During the incident: Commenced an investigation, with the aid of forensic experts
Implemented additional safeguards to protect data
Reported this incident to law enforcement
Changes made: Review and enhance these protections as part of our ongoing commitment to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(150 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGNov 27 · first

New Hampshire State AG+5d · this page

Pattern: first filing Nov 27 (MA), last Dec 2 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-bedford-massachusetts-20191202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2019
Raw hash: 567817e2428f2c56bd4f96b9f8875dd0c6b51b5ba865c073ecbf5618ba07eae7

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityCity of New Bedford, Massachusetts

Incidentdiscovered Jul 5, 2019

Stated responseCommenced an investigation, with the aid of forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov