HackingGovernmentGovernmentStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

The City of Canton, State of Ohio

bd_f4fe2fdd12378ae0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 25, 2024

Filed

Oct 11, 2024

To disclose

11 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for The City of Canton, State of Ohio →

The City of Canton, Ohio, notified consumers of a data security incident discovered on July 25, 2024, involving unauthorized access to a user account. The incident potentially exposed names, driver's license numbers, and addresses. No SSNs or financial information were impacted. The City engaged a cybersecurity firm and is offering 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 78 days

Jul 25, 2024

Discovered

Oct 11, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_59c7e18906fc5eda2024-10-11Candidate
Massachusetts State AGbd_88a313641326e18b2024-10-11Verified
Indiana State AGbd_d7f8abd649b2da5e2024-10-11Verified

Name: The City of Canton, State of Ohio
norm: city of canton

Name: The City of Canton, State of Ohio
norm: the city of canton state of ohio
Industry: Governmentllm

Discovered: Jul 25, 2024
Materiality determined: —
Notification sent: Oct 11, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Changes made: Enhance the security of our systems moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGOct 11 · first

Massachusetts State AGOct 11 · first

Indiana State AGOct 11 · first

Vermont State AGOct 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-10-11-city-canton-state-ohio-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 11, 2024
Raw hash: 26212674b0711f06310b2022bb437fabc6ca4de0c5df33b4e39ea6209a719e34

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe City of Canton, State of Ohio

Victim entityThe City of Canton, State of Ohio

Incidentdiscovered Jul 25, 2024

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov