MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

City of Suffolk

bd_9482dbc01d03d1f9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2026

Filed

Apr 22, 2026

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for City of Suffolk →

The City of Suffolk, Virginia, notified Nebraska AG that on or about February 25, 2026, a malicious actor attempted to deploy ransomware and potentially exfiltrated data from the City's network. The City engaged cybersecurity experts, reported the incident to the FBI and Virginia Fusion Center, and implemented additional security measures. Potentially affected data includes names, SSNs, passport numbers, and financial account information. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

Feb 25, 2026

Begins

Feb 25, 2026

Discovered

Apr 22, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by cloak about this victim predates this filing by 56 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecloakbd_9e6f66974c66dc8c2026-02-24 · +57dVerified

Name: City of Suffolk
norm: city of suffolk
Domain: suffolkva.us

Name: City of Suffolk
norm: city of suffolk
Domain: suffolkva.us
Industry: Governmentllm

Discovered: Feb 25, 2026
Breach occurred: Feb 25, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 22, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported the attack to the Federal Bureau of Investigation (FBI) Cyber Division and the Virginia Fusion Center

During the incident: Engaged third-party cybersecurity experts
Reported the attack to the Federal Bureau of Investigation (FBI) Cyber Division and the Virginia Fusion Center
Engaged a leading security service provider to monitor our network, review our system’s architecture, and implemented stronger policies
Changes made: Implemented additional security measures designed to further protect the privacy of our citizens and staff
Implemented stronger policies to prevent future attacks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5639f013-e711-4abc-b231-cb08b8162732.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2026
Raw hash: b6d38553655467d47d325cd92c564350ed2ce3957510fc18bc7dd67affc5e87a

Linked disclosures

Ransomware claims (1)

Reporting entityCity of Suffolk

Victim entityCity of Suffolk

Incidentdiscovered Feb 25, 2026

Stated responseEngaged third-party cybersecurity experts

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov