HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICAUTHENTICATIONBIOMETRICMINORMediumContained
City of Bedford, Texas
bd_3a590ef5c12e3dae · schema v1 · pii pii-v1
Full breach record for City of Bedford, Texas →City of Bedford, Texas notified the New Hampshire Attorney General of a security event affecting one NH resident. Unauthorized third-party access occurred April 5-9, 2025, detected April 9, 2025. Data included names, credentials, biometrics, health info, financial details, and government IDs. Notices mailed May 21, 2026. Remediation included MFA expansion and security tool reviews.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/city-bedford-texas-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2026
- Raw hash
- 7f84bd6311195ba51112b041f639b45840350a01fd2929a813bcb6d94552e4bf
Reporting entity
- Name
- City of Bedford, Texasnorm: city of bedford texas
- Domain
- bedfordtx.gov
- Industry
- government_public
Victim entity
- Name
- City of Bedford, Texasnorm: city of bedford texas
- Domain
- bedfordtx.gov
- Industry
- government_public
Incident
- Discovered
- Apr 9, 2025
- Materiality determined
- —
- Notification sent
- May 21, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICAUTHENTICATIONBIOMETRICMINOR
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(404 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.