CSIDB logo
Incident

City of Gloversville

Incident posture

Attack window
Mar 2025
Location
United States of America
Status
Unknown
CIA posture
Available to members
Updated
2026-03-24 03:24

Linked entities

Victim
City of Gloversville
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Mar 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The City of Gloversville experienced anexternal system breach that resulted in the acquisition of personal identifiers combined with other data. Approximately three thousand eighty‑four individuals were affected, including five residents of Maine. Following the discovery of the intrusion, written notifications were distributed to those impacted and identity theft protection services were offered for a twelve‑month period through Experian IdentityWorks. The notice was submitted on behalf of the city by Ryan C Altieri of Harter Secrest & Emery LLP.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

3 techniques

Description

The City of Gloversville, New York, a municipal government entity located at 3 Frontage Road, Gloversville, NY 12078, experienced a data breach. The breach was identified as an external system breach resulting from hacking. According to the breach report, the incident occurred on March 12, 2025, and was discovered on March 24, 2025. The breach affected a total of 3,084 individuals, of whom five were residents of Maine. The compromised information included names or other personal identifiers in combination with unspecified personal data.

Notification to affected individuals was conducted via written notice, with the notification date set for May 1, 2025. As part of the response, the city offered identity theft protection services for a duration of twelve months through Experian IdentityWorks, which provides identity theft protection and credit monitoring. The breach report was submitted to the Maine Office of the Attorney General by Ryan C Altieri, an associate attorney at Harter Secrest & Emery LLP, acting on behalf of the city. The submission indicated that no prior breach notifications within the preceding twelve months were reported, as the corresponding field was left blank. The documentation accompanying the notice included a copy of the notice template for Maine residents labeled Template_1_Proof.pdf.

Sources

Sources available to members: 1 source.

CSIDB