HackingGovernmentGovernmentStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Thornton Township, Illinois

bd_7a0f908c27d25afb · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 18, 2025

Filed

Apr 9, 2026

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for Thornton Township, Illinois →

Thornton Township, Illinois, notified residents of a data security incident occurring between March 10 and March 18, 2025. The township discovered unusual activity on March 18, 2025, and confirmed on April 1, 2026, that an unknown actor potentially acquired files containing personal information (name and variable data elements). The township engaged external cybersecurity experts, secured its network, and notified the FBI. Affected individuals were offered credit monitoring services through IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

Mar 10, 2025

Begins

Mar 18, 2025

Discovered

Apr 9, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Thornton Township, Illinois
norm: thornton township illinois

Name: Thornton Township, Illinois
norm: thornton township illinois
Industry: Governmentllm

Discovered: Mar 18, 2025
Breach occurred: Mar 10, 2025 – Mar 18, 2025
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Launched an investigation with the support of external cybersecurity experts
Took steps to secure our network environment, including implementing enhanced security measures
Notified the Federal Bureau of Investigation
Changes made: Implementing enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/cec996bf-b496-4f67-b66e-730b28a1f3b5.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2026
Raw hash: 2766572c2441e5331b79856ade30b3020043c90ebc9b65cd4f554ee97bf2ac9e

Reporting entityThornton Township, Illinois

Victim entityThornton Township, Illinois

Incidentdiscovered Mar 18, 2025

Stated responseLaunched an investigation with the support of external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov