DisclosureLens
UnknownOtherFinancial accountHealth (basic)Government IDMedium

The Washington Post

bd_6ff5ed270daeb9da · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 10, 2026

Filed

Jul 1, 2026

To disclose

—

Affected

Withheld by the regulator

Confidence

95%
Full breach record for The Washington Post →2 incidents on file

THE WASHINGTON POST filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1312). The register records the breach as discovered on June 10, 2026. Personal information types reported: financial account number, medical information, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Leak gap clock✗ Leak >180d
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jun 10, 2026

Discovered

Jul 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by cl0p about this victim predates this filing by 235 days.View originating leak claim

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.