Supply chain ⛓ Supply Chain

Carson City Third-Party Breach (February 2020)

📅 2020-02-01 🏢 Click2Gov
Primary Source ↗

Incident Details

Hackers compromise financial information for Carson City residents who pay water bill online - Carson Now. According to a letter sent out to a group of residents who pay their water bill online in Carson City, their financial information was compromised due to a data breach, according to City Manager Nancy Paulson. The incident “may have involved some personal information you provided to a Carson City vendor in connection with a utility payment,” Paulson states in the letter. Carson City received a report of a security vulnerability on their third-party vendor’s online payment system, Click2Gov, which impacted individuals who legitimately used their website to make payments. Third-party company: Click2Gov.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Click2Gov
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2020-02-01 Breach occurred
  2. 2020-02-11 Publicly disclosed