HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
The City of Cocoa
bd_5cd78ce5db30aa15 · schema v1 · pii pii-v1
Full breach record for The City of Cocoa →City of Cocoa, FL reported an external system breach (hacking) occurring between Feb 8 and Feb 16, 2026, discovered on May 6, 2026. The incident affected 896 individuals, including 1 Maine resident. The breach involved the acquisition of names and personal identifiers. The City provided written notification on June 4, 2026, and offered 12 months of Experian IdentityWorksSM.
Leak gap clock⏱ Leak >90d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 108 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_a8dc5eead0125824Leak Siteinc_ransomfiled 2026-02-23(101d gap)Candidate
- bd_fd2e128aa9b3f361Leak Siteinc_ransomfiled 2026-02-16(108d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e0f06f38-38ea-4153-a005-aaace750a895.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2026
- Raw hash
- bb2c24baad5228ef262576cb6cdcbf133203748ae9cf9e809c87d52db4dace68
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- The City of Cocoanorm: the city of cocoa
- Domain
- cocoafl.gov
- Industry
- government_public
Incident
- Discovered
- May 6, 2026
- Materiality determined
- —
- Notification sent
- Jun 4, 2026
- Affected individuals
- 896
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 6, 2026→ Filed with AG: Jun 4, 202629d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.