HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)PIICriticalActive

Pierce County Library System

bd_13778595ed20da50 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Apr 14, 2025

Filed

Jun 20, 2025

To disclose

10 weeks

Affected

336,826state residents only

Linked

6 records

Confidence

70%

Full breach record for Pierce County Library System →

Supplemental notice from Pierce County Library System (WA) regarding unauthorized access to systems between April 15-21, 2025. Incident discovered April 14, 2025. Affects 336,826 Washington residents. Data exposed includes names, SSNs, financial/medical info, driver's licenses, and DOBs. PCLS notified law enforcement, offered 1-year credit monitoring via IDX, and is implementing additional employee safeguards.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d10 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Apr 15, 2025

Begins

Jun 20, 2025

Filed

This filing is one of 6 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_5b40e5aa1a010f512025-04-21 · +60dVerified by operator

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_71aaa1b316b7365c2025-12-09 · +172dCandidate
Maine State AGbd_a51f9d15cf7ff4ea2025-12-09 · +172dVerified
Indiana State AGbd_e342cc3aa5512dd52025-12-09 · +172dVerified
Massachusetts State AGbd_2c869ac6798413982025-12-10 · +173dVerified by operator

Name: Pierce County Library System
norm: pierce county library system
Domain: piercecountylibrary.org

Name: Pierce County Library System
norm: pierce county library system
Domain: piercecountylibrary.org
Industry: Governmentllm

Discovered: Apr 14, 2025
Breach occurred: Apr 15, 2025 – Apr 21, 2025
Materiality determined: —
Notification sent: Dec 9, 2025
Affected individuals: 336,826state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Data elements: NameDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Washington State Office of the Attorney General
Initial access: valid_credentials

During the incident: Initiated an investigation into the nature and scope of the event
Took steps to secure systems
Undertook a thorough review of the impacted systems
Notified law enforcement regarding the event
Provided access to credit monitoring services for one year through IDX
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGJun 20 · first · this page

Vermont State AG+172d

Maine State AG+172d

Indiana State AG+172d

Massachusetts State AG+173d

Pattern: first filing Jun 20 (WA), last Dec 10 (MA) — a 173-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA33657.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2025
Raw hash: b9af469e0e57b02cc970c8c3a834ac8f6b6f066f5dd572bc0d22c10aa3de078f

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityPierce County Library System

Victim entityPierce County Library System

Incidentdiscovered Apr 14, 2025

Stated responseInitiated an investigation into the nature and scope of the event

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com