DisclosureLens
Social EngineeringGovernmentGovernmentPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Lehigh County Housing Authority

bd_a324dcb3d1f9849e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 7, 2021

Filed

Mar 15, 2021

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%
Full breach record for Lehigh County Housing Authority →
ClarificationPublished Sep 26, 2026

Clarification: the Montana Department of Justice's breach register prints a Date Reported of 3/15/2021 for this entry, earlier than the start of the breach the same register row reports (5/13/2021). We publish the date as the register prints it. The New Hampshire breach register lists this organization's notice of the same incident on March 17, 2022.

Read their full statement

Lehigh County Housing Authority experienced a data security incident on or about July 7, 2021, involving the compromise of an employee's email account. Potentially exposed data included names, addresses, SSNs, driver's license numbers, and financial account/routing numbers. The organization engaged cybersecurity counsel and provided 12-24 months of identity theft protection services through IDX to affected individuals.

Incident timeline — partial

? — ?

Breach window not drawn

Mar 15, 2021

Filed

No interval is drawn: the breach start date on record falls after this filing's date.

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Montana State AGMar 15 · first · this page

Pattern: first filing Mar 15 (MT), last Mar 17 (NH) — a 367-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.