DisclosureLens
HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

American Public Works Association

bd_7b4830eb24ba6c2a · schema v1 · pii pii-v1

Severity

Low

Discovered

May 19, 2020

Filed

Jul 22, 2020

To disclose

9 weeks

Affected

4state residents only

Linked

4 filings

Confidence

66%
Full breach record for American Public Works Association →

American Public Works Association (APWA) notified New Hampshire AG of a data security incident affecting 4 NH residents. Suspicious activity in APWA's online store was detected on May 19, 2020. Unauthorized access compromised payment card info (names, numbers, exp dates, CVV) for purchases made between April 10 and May 20, 2020. APWA engaged forensic investigators, notified card brands and the FBI, and provided 12 months of identity protection services.

Incident timeline

undetected · 39 days
discovery → filing · 9 weeks / 64 days

Apr 10, 2020

Begins

May 19, 2020

Discovered

Jul 22, 2020

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Montana State AGJul 17 · first
Indiana State AG+3d
Massachusetts State AG+5d
New Hampshire State AG+5d · this page

Pattern: first filing Jul 17 (MT), last Jul 22 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.