HackingIdentity (basic)Government IDPIIMediumContained

Massachusetts Department of Revenue

bd_8a96005be87e34be · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 16, 2026

To disclose

—

Affected

1state residents only

Confidence

68%

Full breach record for Massachusetts Department of Revenue →45 incidents on file

The Massachusetts Department of Revenue (DOR) issued a breach notification letter stating that unauthorized access to personal information occurred on an unspecified date. DOR is offering 24 months of complimentary credit monitoring via Experian Identity Works and providing instructions for placing security freezes with major credit bureaus. No evidence of identity theft or fraud was known at the time of the notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 16, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Massachusetts Department of Revenue
norm: massachusetts department of revenue

Name: Massachusetts Department of Revenue
norm: massachusetts department of revenue

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Offering credit monitoring services for twenty-four (24) months through Experian’s Identity Works
Providing information on how to place a security freeze on credit reports
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1152-commonwealth-of-massachusetts-department-of-revenue/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2026
Raw hash: 0f6651c30dcfaf64f4b7c92379e9759edaeb235ffa9cdfc7de73e5f80de3a62c

Reporting entityMassachusetts Department of Revenue

Victim entityMassachusetts Department of Revenue

IncidentUnauthorized Access

Stated responseOffering credit monitoring services for twenty-four (24) months through Experian’s Identity Works

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov