City of Grass Valley

The City of Grass Valley is a municipal government entity that provides local public services to the community within its jurisdiction. It maintains a police department responsible for law enforcement and public safety. It also operates a community development office that processes loan applications and retains related records. The city’s information systems store data concerning employees, vendors, residents, and individuals who have interacted with its police department or community development office. In June 2021, the city suffered a ransomware attack in which unauthorized actors accessed its information systems, exfiltrated data, and threatened to release it unless a ransom was paid. Following the incident, the municipality secured its systems, notified local and federal law enforcement agencies, and engaged a cybersecurity firm to investigate the breach and mitigate potential impacts. These functions reflect the typical responsibilities of a city government, including administrative oversight, public safety provision, and community development support.

In April 2021, a separate data breach affected all city employees, former employees, spouses, dependents, vendors, individuals with records held by the local police department, and loan applicants through its community development office. The compromised information included Social Security numbers, driver's license details, health insurance data, financial account and payment card information, and passport numbers. The unauthorized data exfiltration occurred over several months before being discovered, with notification letters distributed months later. While the city acknowledged the broad scope of impacted groups, it could not confirm specific individuals' exposure. Credit monitoring and identity theft protection were offered for one year exclusively to those whose Social Security or driver's license numbers were confirmed compromised. The organisation’s headquarters are located in Grass Valley, California, United States of America, as indicated by its aliases. Ownership details are not described in the available information, indicating that the entity functions as a public municipal corporation without a private parent or subsidiary organization.