MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Lycoming County Authority
bd_0455aacfc4adecf8 · schema v1 · pii pii-v1
Full breach record for Lycoming County Authority →Lycoming County, PA, notified NH AG of a ransomware incident affecting 2 NH residents. Unauthorized access occurred Aug 11-12, 2025; detected Aug 12, 2025. Data included names and SSNs. County engaged forensic consultants, alerted federal law enforcement, and offered 1-year Experian credit monitoring. Remediation included enhanced security tools, EDR, password resets, and network access restrictions.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9b5c664dcad0d32eMaine State AGfiled 2025-12-09(6d gap)Candidate
- bd_a964e4b13cfb5ca9Indiana State AGfiled 2025-12-09(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/lycoming-county-pennsylvania-20251215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- 332c880d73cbe4e6e629570f72cf4832bcfe2c3e10c21a3f3825360c52400a5e
Reporting entity
- Name
- Lycoming County Authoritynorm: lycoming county authority
Victim entity
- Name
- Lycoming County Authoritynorm: lycoming county authority
Incident
- Discovered
- Aug 12, 2025
- Materiality determined
- Dec 9, 2025
- Notification sent
- Dec 9, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying all appropriate state regulators regarding this incident
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.