BreachesJun 3, 2026
🚨🇺🇸 A threat actor claims to have breached the Chicago City Clerks Legislation API and is dist...
Threat actor claims breach of Chicago City Clerk Legislation API, distributing PII via Telegram.
Vendor Watch
Run City of Chicago?
Get an email when a reviewed story names City of Chicago, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A threat actor has claimed responsibility for breaching the Chicago City Clerk's Legislation API and is publicly distributing full personally identifiable information (PII) records through Telegram. The attacker asserts the data is fresh and sourced directly from Chicago's official legislative records system. The breach potentially exposes sensitive records tied to city legislative processes.
Indicators of Compromise
- domain — chicago.legistar.com
Entities
City of Chicago (vendor)Legistar API (technology)