DisclosureLens
Social EngineeringGovernmentGovernmentPhishingBECCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentHighContained

Bedford County

bd_6c298210bf040b4a · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 28, 2025

Filed

Sep 4, 2025

To disclose

5 weeks

Affected · nationwide

1,3791 in this filing

Confidence

66%
Full breach record for Bedford County →

Bedford County (VA) reported a business email compromise affecting 1,379 individuals, including 1 Maine resident. The breach occurred and was discovered on July 28, 2025, when suspicious activity was detected. Employee PII, including SSNs and financial data, may have been accessible. Notifications were sent on September 4, 2025, offering 24 months of Kroll identity monitoring.

Maine clockDiscovered Jul 28, 2025 → Filed with AG Sep 4, 202538d ⏱ ME AG >30d5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 38 days

Jul 28, 2025

Begins

Jul 28, 2025

Discovered

Sep 4, 2025

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,379 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.