Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with legal representation for the buyer of items, and and containment measures with arrest and detention of brabon, containment measures with search warrant executed on suspect’s property (for stolen items case), and remediation measures with court proceedings for registration violations, remediation measures with 30-day jail sentence for obstruction charge (2023), remediation measures with dropped theft charges against buyer, and communication strategy with public court records, communication strategy with media reporting, and enhanced monitoring with potential increased monitoring of brabon as a repeat offender..

Common Attack Types: The most common types of attacks the company has faced is Breach.

Third-Party Assistance: The company involves third-party assistance in incident response through legal representation for the buyer of items, .

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Court proceedings for registration violations, 30-day jail sentence for obstruction charge (2023), Dropped theft charges against buyer, .

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by arrest and detention of brabon, search warrant executed on suspect’s property (for stolen items case) and .

Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through $15,000 bond set (not reduced), 30-day jail sentence for obstruction (2023), Ongoing felony/misdemeanor charges for registration violations, .

Key Lessons Learned: The key lessons learned from past incidents are Importance of verifying sex offender registration details (employment, residence, identities),Need for cross-jurisdictional coordination in tracking offenders (Michigan to Arkansas),Risks of false reporting and its impact on law enforcement resources,Challenges in prosecuting habitual offenders with multiple minor violations.

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Baxter County Circuit Court recordsDate Accessed: 2024-05-20, and Source: Baxter County Sheriff’s Office probable cause affidavit (2023 theft case)Date Accessed: 2023-12-30, and Source: Michigan sex offender registry (Ottawa County, 2003 conviction).

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public Court Records and Media Reporting.

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Baxter County Residents Advised To Verify Seller Identities For High-Value Items and Law Enforcement Advised To Monitor Brabon’S Compliance Post-Trial.

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Legal Representation For The Buyer Of Items, , Potential Increased Monitoring Of Brabon As A Repeat Offender, .

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Proposal For Automated Employment/Residence Verification For Registrants, Review Of Bond Policies For Repeat Offenders, Enhanced Training For Investigators On Detecting False Theft Reports, .

Last Attacking Group: The attacking group in the last incident were an Name: Rodney Wayne BrabonAge: 58Gender: maleLocation: Henderson, Baxter County, ArkansasCriminal History: [{'offense': '3rd degree criminal sexual conduct (2 counts)', 'location': 'Ottawa County, Michigan', 'date': '2003-02-24', 'sentence': None}, {'offense': 'Failure to comply with sex offender registration (Michigan)', 'date': '2016-01-19', 'sentence': None}, {'offense': 'Obstruction of governmental operations (false theft report)', 'location': 'Baxter County, Arkansas', 'date': '2023-12-30' and 'sentence': '30 days in Baxter County Detention Center'}]Risk Level: Level 2 (moderate risk for reoffending)Aliases: ['Rodney Jones'].

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024-05-20.

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was legal representation for the buyer of items, .

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Arrest and detention of BrabonSearch warrant executed on suspect’s property (for stolen items case).

Most Significant Legal Action: The most significant legal action taken for a regulatory violation was $15,000 bond set (not reduced), 30-day jail sentence for obstruction (2023), Ongoing felony/misdemeanor charges for registration violations, .

Most Significant Lesson Learned: The most significant lesson learned from past incidents was Challenges in prosecuting habitual offenders with multiple minor violations.

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Enhanced verification processes for sex offender registrations (e.g., employment/social media audits), Training for law enforcement on identifying false theft reports, Stricter penalties for repeat registration violations and Public awareness campaigns on reporting suspicious sales of second-hand goods.

Most Recent Source: The most recent source of information about an incident are Baxter County Circuit Court records, Michigan sex offender registry (Ottawa County, 2003 conviction) and Baxter County Sheriff’s Office probable cause affidavit (2023 theft case).

Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing (registration violation charges pending; theft case resolved).

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was Baxter County residents advised to verify seller identities for high-value items, Law enforcement advised to monitor Brabon’s compliance post-trial, .