AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Chester County Probation/Parole and Pretrial Services

bd_792778bdae42bfb7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 7, 2025

Filed

Nov 13, 2025

To disclose

—

Affected

241state residents only

Linked

8 filings

Confidence

66%

Full breach record for Chester County Probation/Parole and Pretrial Services →

Chester County Probation/Parole and Pretrial Services notified the Maryland Attorney General of a data security incident involving 241 Maryland residents. On December 31, 2024, an employee mistakenly emailed a password-protected attachment containing names and Social Security numbers of County DUI Program participants to an external recipient. The recipient bypassed the password on January 7, 2025. Notices were sent to affected individuals on January 16, 2025, offering one year of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

Dec 31, 2024

Begins

Jan 7, 2025

Discovered

Nov 13, 2025

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_c65a57ff489bf1ab2025-01-27 · +290dVerified
New Hampshire State AGbd_0771a5d704e339a12025-01-23 · +294dVerified
Vermont State AGbd_12d3f15a6b54f9982025-01-16 · +301dVerified
Delaware State AGbd_2d64d6cb8f8efe3c2025-01-16 · +301dVerified

Show 3 more filings ↓up to 301d gap

Maine State AGbd_4dd6c39c7b88ed4b2025-01-16 · +301dCandidate
Nebraska State AGbd_5bfeb1212dbb4faa2025-01-16 · +301dVerified
Indiana State AGbd_d5b7e43fc1edf3c42025-01-16 · +301dVerified

Name: Chester County Probation/Parole and Pretrial Services
norm: chester county probation parole and pretrial

Name: Chester County Probation/Parole and Pretrial Services
norm: chester county probation parole and pretrial
Industry: Governmentllm

Discovered: Jan 7, 2025
Breach occurred: Dec 31, 2024
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2025
Affected individuals: 241state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Misconfiguration
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: Internal
Regulator citations: Notifying all appropriate state regulators

During the incident: Strengthening security measures protecting personal information maintained by the County DUI Program
Creating additional security procedures for communicating with individuals in the County DUI Program
Retraining all County employees regarding email security practices
Investigating additional tools to strengthen data security
Providing notice of this incident via U.S. Mail
Offering a one-year, complimentary membership with Experian for credit monitoring and identity theft services
Changes made: Strengthening security measures protecting personal information
Creating additional security procedures for communicating with individuals
Retraining all County employees regarding email security practices
Investigating additional tools to strengthen data security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Vermont State AGJan 16 · first

Delaware State AGJan 16 · first

Maine State AGJan 16 · first

Nebraska State AGJan 16 · first

Indiana State AGJan 16 · first

New Hampshire State AG+7d

Massachusetts State AG+11d

Maryland State AG+301d · this page

Pattern: first filing Jan 16 (VT), last Nov 13 (MD) — a 301-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376205.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: e63763f1df189cbe631fa48560ce7c5f8bad562ff37c30fe06b079ff08b15e8d

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityChester County Probation/Parole and Pretrial Services

Victim entityChester County Probation/Parole and Pretrial Services

Incidentdiscovered Jan 7, 2025

Stated responseStrengthening security measures protecting personal information maintained by the County DUI Program

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov