AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Municipality of Anchorage

bd_ff24a2038aeefe7f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2021

Filed

Jun 4, 2021

To disclose

15 weeks

Affected

1state residents only

Linked

5 filings

Confidence

65%

Full breach record for Municipality of Anchorage →

Municipality of Anchorage notified Montana AG that on or around Feb 18, 2021, unredacted traffic collision reports containing names, DOBs, and driver's license numbers were uploaded to LexisNexis. Investigation completed April 7, 2021. No evidence of misuse. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 106 days

Feb 18, 2021

Discovered

Jun 4, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_99a2f2bbe61092e02021-06-04Verified
Maine State AGbd_d56605fe6140d4f12021-06-04Candidate
Indiana State AGbd_fc0d1d86839a90d22021-06-04Verified
New Hampshire State AGbd_110e978ef378aa792021-06-08 · +4dVerified

Name: Municipality of Anchorage
norm: municipality of anchorage

Name: Municipality of Anchorage
norm: municipality of anchorage
Industry: Governmentllm

Discovered: Feb 18, 2021
Materiality determined: —
Notification sent: Jun 1, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection

During the incident: Asked Lexis to remove the unredacted records from its database
Confirmed that the unredacted reports were removed from Lexis Nexis’ database
Reviewed the unredacted records to determine whether and what personal information was present
Offering access to credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJun 4 · first

Maine State AGJun 4 · first

Indiana State AGJun 4 · first

Montana State AGJun 4 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Anch-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2021
Raw hash: ddcc6b348e33b67ac0ad50efc1183b506b24d07eb807107a98af10b4462de0ec

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMunicipality of Anchorage

Victim entityMunicipality of Anchorage

Incidentdiscovered Feb 18, 2021

Stated responseAsked Lexis to remove the unredacted records from its database

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov