HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
Children's Council of San Francisco
bd_13cc3591bebd9bb2 · schema v1 · pii pii-v1
Full breach record for Children's Council of San Francisco →Children's Council of San Francisco, a San Francisco-based non-profit, experienced a network disruption on August 3, 2025. An unknown external actor accessed and acquired data without authorization. Affected data included names combined with Social Security numbers. The incident was discovered on February 23, 2026. One Maine resident was among 12,655 total individuals affected. The organization notified the FBI and offered 12-month credit monitoring through TransUnion/Cyberscout.
Maine clockDiscovered Feb 23, 2026 → Filed with AG Mar 3, 20268d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_ac66c0f72cc2eaf3Vermont State AGfiled 2026-03-03Verified
- bd_d544b6922b9ab320New Hampshire State AGfiled 2026-03-03Verified
- bd_f70372d1a991c750California State AGfiled 2026-02-27(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3d4314af-ebbc-4918-93fb-e7dcf0e09428.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2026
- Raw hash
- 2b6f0131af2e6c7ad1d37bc75575e2ab2cbed7faf4f0763b68b2b45edeed7c62
Reporting entity
- Name
- Children's Council of San Francisconorm: children s council of san francisco
- Industry
- Non-Profit
Victim entity
- Name
- Children's Council of San Francisconorm: children s council of san francisco
- Industry
- Non-Profit
Incident
- Discovered
- Feb 23, 2026
- Materiality determined
- —
- Notification sent
- Mar 2, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Federal Bureau of Investigation notified
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 23, 2026→ Filed with AG: Mar 3, 20268d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.