DisclosureLens
Social EngineeringGovernmentGovernmentPhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Town of Lovell

bd_4855c0358fe134ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 10, 2025

Filed

Sep 7, 2025

To disclose

13 weeks

Affected

11state residents only

Confidence

66%
Full breach record for Town of Lovell →

Town of Lovell, Maine, notified 11 residents that their personal information, including names and Social Security numbers, was accessed without authorization. The incident stemmed from the compromise of one employee's email account, likely via phishing, with unauthorized access occurring on May 22, 2025. The town discovered the suspicious activity on June 10, 2025, and engaged cybersecurity specialists. Affected individuals were offered 12 months of credit monitoring and identity protection services.

Maine clockDiscovered Jun 10, 2025 → Filed with AG Sep 7, 202589d ⏱ ME AG >30d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 19 days
discovery → filing · 13 weeks / 89 days

May 22, 2025

Begins

Jun 10, 2025

Discovered

Sep 7, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.