DisclosureLens
HackingGovernmentGovernmentTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

City of New Brighton

bd_1778c372dad776da · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 18, 2025

Filed

Oct 20, 2025

To disclose

18 weeks

Affected · nationwide

5,9401 in this filing

Linked

2 filings

Confidence

66%
Full breach record for City of New Brighton

The City of New Brighton experienced an external system breach (hacking) affecting employee email accounts. Unauthorized access occurred between May 29 and June 18, 2025. The incident potentially exposed personal information, including names and government identifiers, of 5,940 individuals. The City engaged cybersecurity experts and notified affected individuals on October 17, 2025.

Maine clockDiscovered Jun 18, 2025Filed with AG Oct 20, 2025124d ME AG >90d18 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 20 days
discovery → filing · 18 weeks / 124 days

May 29, 2025

Begins

Jun 18, 2025

Discovered

Oct 20, 2025

Filed

vs. sector median

+7 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Indiana State AGOct 17 · first
Maine State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.