City of Lubbock Utilities reported a data breach affecting its third-party hosted payment website. Between Dec 18, 2024, and Jan 6, 2025, a malicious actor injected a fake pop-up to harvest credit card details (number, CVV, expiration) and billing info from customers making one-time utility payments. The City disabled the site, engaged forensic specialists, scanned the dark web, and notified federal law enforcement. Free credit monitoring is offered.