MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Union County, Oregon
bd_4375732219239caa · schema v1 · pii pii-v1
Full breach record for Union County, Oregon →Union County, Pennsylvania, notified the New Hampshire Attorney General of a ransomware incident detected on March 13, 2025. The attack resulted in the exfiltration of names and Social Security numbers of one New Hampshire resident. The County engaged forensic consultants, alerted federal law enforcement, reset passwords, and enhanced network security. Affected individuals were offered one year of Experian credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_71e9b5c5c42e588fMaine State AGfiled 2025-07-16(9d gap)Verified
- bd_129fe192eb172c19Maine State AGfiled 2025-06-27(10d gap)Candidate
- bd_cbf114d46ca6086fNew Hampshire State AGfiled 2025-07-21(14d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/union-county-pennsylvania-20250707.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- 029ef9e525df92e9073562a8a317aa3b68e72b63f699b8ee3da11968041e4472
Reporting entity
- Name
- Union County, Oregonnorm: union county oregon
Victim entity
- Name
- Union County, Oregonnorm: union county oregon
Incident
- Discovered
- Mar 13, 2025
- Materiality determined
- May 29, 2025
- Notification sent
- Jun 27, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified the Union County District AttorneyWill notify all appropriate regulators
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.