MalwareGovernmentGovernmentRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

City of Suffolk Virginia

bd_658ce4bb4e6a0629 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2026

Filed

Apr 20, 2026

To disclose

8 weeks

Affected

53scope not determined

Linked

4 filings

Confidence

67%

Full breach record for City of Suffolk Virginia →

The City of Suffolk, VA, notified the New Hampshire Attorney General of a ransomware incident discovered on February 25, 2026. Malicious actors accessed the network on February 24, 2026, attempting to encrypt data. 53 individuals were potentially affected, with exposure of names, SSNs, passport numbers, and financial account data. The City engaged forensic experts, notified the FBI, and terminated access. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 8 weeks / 54 days

Feb 24, 2026

Begins

Feb 25, 2026

Discovered

Apr 20, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Texas State AGbd_2e5262f6c8a9b26b2026-04-22 · +2dCandidate
Indiana State AGbd_9da122387e5abb262026-04-22 · +2dVerified
Maine State AGbd_c52256f6a07e9db52026-05-26 · +36dVerified

Name: City of Suffolk Virginia
norm: city of suffolk virginia

Name: City of Suffolk Virginia
norm: city of suffolk virginia
Industry: Governmentllm

Discovered: Feb 25, 2026
Breach occurred: Feb 24, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 53scope not determined
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Officereported the attack to the Federal Bureau of Investigation (FBI) Cyber Division and the Virginia Fusion Center
Initial access: exploit_public_facing

During the incident: Engaged third-party cybersecurity experts to investigate the incident
Law enforcement was notified
Reported the attack to the Federal Bureau of Investigation (FBI) Cyber Division and the Virginia Fusion Center
Terminated network access
Changes made: Implemented additional security measures designed to further protect the privacy of our citizens and staff
Engaged a leading security service provider to monitor our network
Reviewed our system's architecture
Implemented stronger policies to prevent future attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGApr 20 · first · this page

Texas State AG+2d

Indiana State AG+2d

Maine State AG+36d

Pattern: first filing Apr 20 (NH), last May 26 (ME) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/city-suffolk-va-20260420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2026
Raw hash: 67c48a90d1899a763ea8f7f01f6a12fef5ec8e79a78b7f0384d1bf32f6128709

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCity of Suffolk Virginia

Victim entityCity of Suffolk Virginia

Incidentdiscovered Feb 25, 2026

Stated responseEngaged third-party cybersecurity experts to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov