HackingGovernmentEducationGovernmentCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
Pierce County Library System
bd_a51f9d15cf7ff4ea · schema v1 · pii pii-v1
Full breach record for Pierce County Library System →Pierce County Library System (PCLS), a public library in Tacoma, WA, experienced an unauthorized access event between April 15–21, 2025, in which files containing personal information (names and Social Security numbers) were copied and taken. The breach was discovered on October 10, 2025 following an investigation into suspicious activity. Six Maine residents were affected. PCLS notified law enforcement and is offering 12 months of IDX credit monitoring to affected individuals.
Leak gap clock✗ Leak >180d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident
A leak claim by inc_ransom about this victim predates this filing by 235 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0464a4b3-6f79-46b5-9b7b-22cef5b1048d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 9, 2025
- Raw hash
- 0bacba22a032d79a416896283d1049c9126d689990df603cfaa283f0b206a2f1
Reporting entity
- Name
- Pierce County Library Systemnorm: pierce county library system
- Domain
- piercecountylibrary.org
- Industry
- Public Library / Government Entity
Victim entity
- Name
- Pierce County Library Systemnorm: pierce county library system
- Domain
- piercecountylibrary.org
- Industry
- Public Library / Government Entity
- Industry
- GovernmentllmEducationllm
Incident
- Discovered
- Oct 10, 2025
- Materiality determined
- —
- Notification sent
- Dec 9, 2025
- Affected individuals
- 6
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Law enforcement notified
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 10, 2025→ Filed with AG: Dec 9, 202560d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.