Supply chain
⛓ Supply Chain
Carson City Third-Party Breach (February 2020)
Primary Source ↗Incident Details
Hackers compromise financial information for Carson City residents who pay water bill online - Carson Now. According to a letter sent out to a group of residents who pay their water bill online in Carson City, their financial information was compromised due to a data breach, according to City Manager Nancy Paulson. The incident “may have involved some personal information you provided to a Carson City vendor in connection with a utility payment,” Paulson states in the letter. Carson City received a report of a security vulnerability on their third-party vendor’s online payment system, Click2Gov, which impacted individuals who legitimately used their website to make payments. Third-party company: Click2Gov.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Click2Gov
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2020-02-01 Breach occurred
- 2020-02-11 Publicly disclosed