HackingGovernmentGovernmentCustomer Data InvolvedDelayed DiscoveryPIILowContained
Lorain County Auditor's Office
bd_689096425d594a9a · schema v1 · pii pii-v1
Full breach record for Lorain County Auditor's Office →On or about May 23, 2025, an unauthorized party obtained access to the internal network of the Lorain County Auditor's Office (Elyria, OH). The breach was discovered on August 6, 2025 following a forensic investigation. Approximately 18,491 individuals were affected in total, with 5 Maine residents impacted. Affected files contained personally identifiable information. Twelve months of complimentary identity monitoring was offered through Privacy Solutions/Equifax.
Maine clockDiscovered Aug 6, 2025 → Filed with AG Sep 19, 202544d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9d485efc3c2da1fbVermont State AGfiled 2025-09-19Verified
- bd_c481abdf0b33025fIndiana State AGfiled 2025-09-19Verified
- bd_d5f6fda3b2a13358New Hampshire State AGfiled 2025-09-25(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a6d9b132-48f9-43b7-b222-6e5c9f326409.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2025
- Raw hash
- f78f10e76922c276d6a606792a4695fb90e2c0aba4b9d90ae49b0b7e6adbf2bd
Reporting entity
- Name
- Lorain County Auditor's Officenorm: lorain county auditor s office
- Industry
- Other Government Entity
Victim entity
- Name
- Lorain County Auditor's Officenorm: lorain county auditor s office
- Industry
- Other Government Entity
- Industry
- Governmentllm
Incident
- Discovered
- Aug 6, 2025
- Materiality determined
- —
- Notification sent
- Sep 19, 2025
- Affected individuals
- 5
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Maine Attorney General data breach notification filed
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- ME AG >30d · 44d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 6, 2025→ Filed with AG: Sep 19, 202544d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.