MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedRansom DemandedTargetedIdentity (basic)Government IDMediumContained

Union County, Pennsylvania

bd_129fe192eb172c19 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 29, 2025

Filed

Jun 27, 2025

To disclose

29 days

Affected · nationwide

9311 in this filing

Linked

5 filings

Confidence

66%

Full breach record for Union County, Pennsylvania →

Union County, Pennsylvania reported a ransomware incident on March 13, 2025, discovered on May 29, 2025. The attack encrypted data and exfiltrated personal information including names and government IDs. 931 individuals were affected, including 1 Maine resident. Notices were sent on June 27, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 29, 2025 → Filed with AG Jun 27, 202529d ✓ ME AG ≤30d29 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 77 days

discovery → filing · 29 days

Mar 13, 2025

Begins

May 29, 2025

Discovered

Jun 27, 2025

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_4375732219239caa2025-07-07 · +10dVerified
Maine State AGbd_71e9b5c5c42e588f2025-07-16 · +19dVerified
Nebraska State AGbd_ec5907c36b1574362025-07-16 · +19dVerified
New Hampshire State AGbd_cbf114d46ca6086f2025-07-21 · +24dVerified

Name: Union County, Pennsylvania
norm: union county

Name: Union County, Pennsylvania
norm: union county pennsylvania
Industry: Governmentllm

Discovered: May 29, 2025
Breach occurred: Mar 13, 2025
Undetected for: 77 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 27, 2025
Affected individuals: 931state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Union County District AttorneyAlerted federal law enforcementNotify all appropriate state regulators

During the incident: Worked with our team to secure our network and begin an investigation
Notified the Union County District Attorney
Cooperate with any law enforcement investigation
Alerted federal law enforcement
Launched an investigation with assistance from nationally recognized third-party cybersecurity and data forensics consultants
Conducted an enterprise-wide password reset
Offered 12 months of complimentary credit monitoring through Experian
Changes made: Deployed security tools to enhance detection and accelerate response to cyber incidents
Actively monitoring our network using end point detection tools to help ensure containment
Strengthened restrictions for external network access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: ME AG ≤30d · 29d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 29, 2025
→ Filed with AG: Jun 27, 2025
29d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 29, 2025 → Filed with AG: Jun 27, 2025	29d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 3 states

View merged incident ↗

Maine State AGJun 27 · first · this page

New Hampshire State AG+10d

Maine State AG+19d

Nebraska State AG+19d

New Hampshire State AG+24d

Pattern: first filing Jun 27 (ME), last Jul 21 (NH) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/76dc46b7-9128-4c40-bb72-ce149b55d05c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 27, 2025
Raw hash: fa6f6b017192bd36dbda90f792064987208aa3f30d254876d06812d6b0a05a4f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityUnion County, Pennsylvania

Victim entityUnion County, Pennsylvania

Incidentdiscovered May 29, 2025

Stated responseWorked with our team to secure our network and begin an investigation

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov