United States
USA
New York ethics commission cyberattack halts online disclosure and lobbying filings
An attack on a legacy web application server at New York State’s Joint Commission on Public Ethics prompted shutdown of its online lobbying and financial disclosure filing applications in February 2022. Filers could not use these statutory digital services until the modern applications were restored on 9 March, and filing deadlines were extended. A later official notice confirmed unauthorized access to a legacy credentials file; the commission initially stated it had not found evidence of unauthorized access to current user data.
76
Estimated severity
76 / 100
94
Source reliability
94 / 100
Approximate Date
2022-02-21
Targeted Company
NEW YORK STATE JOINT COMMISSION ON PUBLIC ETHICS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
16 days
Financial impact (USD M)
No information
Impact types
Operational disruptionService unavailability
Affected sectors
Government & Public Administration
Affected departments
Information TechnologyLegal, Risk & Compliance
Attack Profile
Attack types
Data breachUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
ethics.ny.govhttps://ethics.ny.gov/news/statement-update-jcope-systems-outageethics.ny.govhttps://ethics.ny.gov/news/jcope-update-cyber-security-incidentethics.ny.govhttps://ethics.ny.gov/news/march-9-update-cyber-security-incident-responseethics.ny.govhttps://ethics.ny.gov/news/jcope-issues-notice-following-february-cyber-security-incident