HackingGovernmentGovernmentSupply Chain (3P Vendor)Delayed DiscoveryCustomer Data InvolvedData ExfiltratedPIILowContained
City of Lake Jackson
bd_0d6720a3e75b97f7 · schema v1 · pii pii-v1
Full breach record for City of Lake Jackson →City of Lake Jackson, TX notified the Maine AG of a cybersecurity incident at third-party document management vendor doc2e-file, Inc. (Doc2). On September 3, 2024, Doc2 informed Lake Jackson of a cyber incident on Doc2's network. A subsequent investigation concluded on January 13, 2025 that an unauthorized party may have accessed Lake Jackson's data. One Maine resident was affected. Notifications were sent April 1, 2025. Experian IdentityWorks 12-month credit monitoring was offered.
Maine clockDiscovered Jan 13, 2025 → Filed with AG Apr 1, 202578d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ece77c9e5f3007d7Indiana State AGfiled 2025-04-01Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc1d47ba-bb83-4699-ace0-e4e228322862.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2025
- Raw hash
- 9574ba0223fc68967b418b70e28b900438a5bda8f686a5a53b1edfed30e67ea0
Reporting entity
- Name
- City of Lake Jacksonnorm: city of lake jackson
- Industry
- Other Government Entity
Victim entity
- Name
- City of Lake Jacksonnorm: city of lake jackson
- Industry
- Other Government Entity
- Industry
- Governmentllm
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Apr 1, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via doc2e-file, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- ME AG >30d · 78dME resident >60d · 78d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2025→ Filed with AG: Apr 1, 202578d 30 days (soft) ME AG >30d Maine Discovered: Jan 13, 2025→ Notified: Apr 1, 202578d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.