AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowResolved

Town of Auburn, Massachusetts

bd_1ec8b6a5b77b1d35 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 10, 2026

To disclose

—

Affected

3state residents only

Confidence

66%

Full breach record for Town of Auburn, Massachusetts →2 incidents on file

The Town of Auburn, Massachusetts, disclosed that a resident's personal check was mistakenly posted on the town's website in backup information provided to the Zoning Board of Appeals on January 14, 2026. The exposed data included the individual's name, address, bank account number, and bank routing number. The incident was caused by an employee error. The town terminated the responsible employee and committed to providing proper training for staff handling checks. No social security numbers were involved.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 14, 2026

Begins

Aug 10, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Town of Auburn, Massachusetts
norm: town of auburn massachusetts
Domain: auburnma.us

Name: Town of Auburn, Massachusetts
norm: town of auburn massachusetts
Domain: auburnma.us
Industry: Governmentllm

Discovered: —
Breach occurred: Jan 14, 2026
Materiality determined: —
Notification sent: Aug 10, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unknown
Threat actor: Internal
Regulator citations: Reported the data breach to the Attorney General’s officeReported the data breach to the Office of Consumer Affairs and Business Regulation

During the incident: Removed the personal check from the Town of Auburn website
Terminated the employee who made the mistake
Reported the data breach to the Attorney General’s office and the Office of Consumer Affairs and Business Regulation
Changes made: Ensure proper training for all current employees who handle personal or business checks
Ensure systems are in place to prevent this in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1331-town-of-auburn/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 10, 2026
Raw hash: 5effa925439b703d902383d8a5ee3fa1d26306897276abf429cf6d4031862f3f

Reporting entityTown of Auburn, Massachusetts

Victim entityTown of Auburn, Massachusetts

IncidentUnknown

Stated responseRemoved the personal check from the Town of Auburn website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov