HackingGovernmentGovernmentCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
Town of Lovell
bd_4855c0358fe134ef · schema v1 · pii pii-v1
Full breach record for Town of Lovell →Town of Lovell, a Maine government entity, experienced unauthorized access to an employee email account. Suspicious activity was first noticed around June 10, 2025, but investigation determined files may have been accessed on May 22, 2025. Discovery that personal information (name and Social Security number) was contained in affected files occurred August 29, 2025. Eleven Maine residents were affected. Credit monitoring services were offered via TransUnion/Cyberscout.
Maine clockDiscovered Aug 29, 2025 → Filed with AG Sep 7, 20259d ✓ ME AG ≤30d9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/88b2f8a7-bf04-48a8-801b-6fa27ed0f398.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 7, 2025
- Raw hash
- c0a37e2fad7a8d4a522b599647a683350dcd92ba90af2a29151e050e9897a4da
Reporting entity
- Name
- Town of Lovellnorm: town of lovell
- Industry
- Government Entity in Maine
Victim entity
- Name
- Town of Lovellnorm: town of lovell
- Industry
- Government Entity in Maine
- Industry
- Governmentllm
Incident
- Discovered
- Aug 29, 2025
- Materiality determined
- —
- Notification sent
- Sep 3, 2025
- Affected individuals
- 11
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 9d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 29, 2025→ Filed with AG: Sep 7, 20259d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.