HackingGovernmentGovernmentStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Lampasas County, Texas

bd_8e158500b202d3c1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 14, 2025

Filed

Apr 25, 2025

To disclose

14 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Lampasas County, Texas →

Lampasas County, Texas notified the NH AG of a data security incident. Unauthorized access to one employee's email account occurred on Jan 9, 2025, detected on Jan 14, 2025. Investigation confirmed personal information of individuals associated with the County was affected. One NH resident was notified on April 23, 2025. Credit monitoring services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 14 weeks / 101 days

Jan 9, 2025

Begins

Jan 14, 2025

Discovered

Feb 27, 2025

Scope determined

Apr 25, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_7b73b882872e35002025-04-25Verified
Maine State AGbd_d4021404a047c6c82025-04-25Candidate
Indiana State AGbd_0f4181177bf6e5372025-04-23 · +2dVerified

Name: Lampasas County, Texas
norm: lampasas county texas

Name: Lampasas County, Texas
norm: lampasas county texas
Industry: Governmentllm

Discovered: Jan 14, 2025
Breach occurred: Jan 9, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: Feb 27, 2025
Notification sent: Apr 23, 2025
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Took steps to secure its email tenant
Engaged a leading cybersecurity firm to assist with an investigation
Engaged an independent team to conduct a comprehensive review of all data within the affected mailbox
Worked diligently to obtain missing address information for those affected individuals
Notified one (1) New Hampshire resident of this data security incident via U.S. First-Class Mail
Offering credit monitoring and identity theft protection services through IDX at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 23 · first

Massachusetts State AG+2d

Maine State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lampasas-county-texas-20250425.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: 76efa5983621014a951acd36a475998f0edc0f1750b57f274ba1bc419a80a6c0

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLampasas County, Texas

Victim entityLampasas County, Texas

Incidentdiscovered Jan 14, 2025

Stated responseTook steps to secure its email tenant

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov