MalwarePIIIdentity (basic)CredentialsLowContained

City of Huntsville, Texas

bd_fbca129a7de4db89 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 21, 2022

Filed

Apr 19, 2023

To disclose

26 weeks

Affected

1state residents only

Linked

2 records

Confidence

66%

Full breach record for City of Huntsville, Texas →

City of Huntsville, Texas notified Montana residents of a ransomware incident detected on October 21, 2022. The malware encrypted files and potentially exfiltrated personal information including usernames and passwords. The City contained the threat, restored data, and engaged external cybersecurity professionals. Notification was sent on March 9, 2023, offering one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d26 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 weeks / 180 days

Oct 21, 2022

Begins

Oct 21, 2022

Discovered

Apr 19, 2023

Filed

This filing is one of 2 records about the same incident.View merged incident

A leak claim by hive about this victim was first seen 120 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehivebd_701160e0f72e54172022-12-20 · +120dVerified by operator

Name: City of Huntsville, Texas
norm: city of huntsville texas
Industry: government_public

Name: City of Huntsville, Texas
norm: city of huntsville texas
Industry: government_public

Discovered: Oct 21, 2022
Breach occurred: Oct 21, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 9, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Contained the threat by disabling all unauthorized access to our network
Restored all encrypted data
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B
Changes made: Continually evaluate and modify our practices to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(180 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-200.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2023
Raw hash: c2f5068df38ae875ba864587bc70fa52ca6e0a38e1a1dd11c7caddf93e31c47f

Linked disclosures

Ransomware claims (1)

Reporting entityCity of Huntsville, Texas

Victim entityCity of Huntsville, Texas

Incidentdiscovered Oct 21, 2022

Stated responseContained the threat by disabling all unauthorized access to our network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov