MalwareGovernmentGovernmentRansomwareData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

Lemhi County

bd_9d5d9bcd36fc233c · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 3, 2026

Filed

Oct 16, 2026

To disclose

11 weeks

Affected

Not disclosed

Confidence

67%

Full breach record for Lemhi County →

Lemhi County, Idaho discovered ransomware on its computer network on August 3, 2026. The County engaged legal counsel and a digital forensics firm to contain the incident and restore operations. A third-party review confirmed that personal information as defined by Idaho law was included in the affected data. The County notified federal law enforcement and is cooperating with the investigation. Notification to affected individuals and credit monitoring offers are planned upon completion of the review.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 74 days

Aug 3, 2026

Discovered

Oct 16, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Lemhi County
norm: lemhi county

Name: Lemhi County
norm: lemhi county
Industry: Governmentllm

Discovered: Aug 3, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementNotified Idaho Attorney General

During the incident: Immediately began working with legal counsel and a nationally recognized cyber security and digital forensics firm
Contain the incident
Securely restore operations
Investigate the scope of the incident
Mitigate any resulting harm
Notified federal law enforcement of this incident
Cooperating with the investigation
Engaged a third-party vendor to review the affected data to identify potential legal notification obligations
Changes made: Will provide written notification to affected individuals
Offer of complimentary credit monitoring where appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/10/2026-10-16-Lemhi-County.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2026
Raw hash: e42a592fbc87d2d5d5551e8d1fa386e41390659a25a9ddd7a575c60d76c3f940

Reporting entityLemhi County

Victim entityLemhi County

Incidentdiscovered Aug 3, 2026

Stated responseImmediately began working with legal counsel and a nationally recognized cyber security and digital forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov