HackingEducationEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDCriticalContained

Pierce County Library System

bd_a51f9d15cf7ff4ea · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 10, 2025

Filed

Dec 9, 2025

To disclose

9 weeks

Affected · nationwide

340,1016 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Pierce County Library System →3 incidents on file

Pierce County Library System experienced an external system breach (hacking) between April 15 and April 21, 2025. Unauthorized access resulted in the copying and taking of files containing names and Social Security numbers. The breach was discovered on October 10, 2025. Approximately 340,101 individuals were affected nationwide, including 6 Maine residents. Notices were sent on December 9, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d9 weeks discovery → filing

Incident timeline

undetected · 178 days

discovery → filing · 9 weeks / 60 days

Apr 15, 2025

Begins

Oct 10, 2025

Discovered

Dec 9, 2025

Filed

vs. sector median

on median

This filing is one of 6 about the same incident.View merged incident

A leak claim by inc_ransom about this victim predates this filing by 235 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteinc_ransombd_5b40e5aa1a010f512025-04-21 · +232dVerified
Leak Siteinc_ransombd_0b3e1f1fba96601d2025-04-18 · +235dVerified by operator

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_71aaa1b316b7365c2025-12-09Candidate
Indiana State AGbd_e342cc3aa5512dd52025-12-09Verified
Massachusetts State AGbd_2c869ac6798413982025-12-10 · +1dVerified by operator

Name: Pierce County Library System
norm: pierce county library system
Domain: piercecountylibrary.org

Name: Pierce County Library System
norm: pierce county library system
Domain: piercecountylibrary.org
Industry: Educationllm

Discovered: Oct 10, 2025
Breach occurred: Apr 15, 2025 – Apr 21, 2025
Undetected for: 178 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 9, 2025
Affected individuals: 340,101state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Promptly took steps to secure its systems
Initiated an investigation into the nature and scope of the event
Undertook a thorough review of the impacted systems
Notified law enforcement regarding the event
Provided access to credit monitoring services for one year through IDX
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 60d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 10, 2025
→ Filed with AG: Dec 9, 2025
60d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 10, 2025 → Filed with AG: Dec 9, 2025	60d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGDec 9 · first

Indiana State AGDec 9 · first

Maine State AGDec 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0464a4b3-6f79-46b5-9b7b-22cef5b1048d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 9, 2025
Raw hash: fb768da22c9b701a7723b09acf53e5841217be174e0fe89f61b3f75d136f5737

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityPierce County Library System

Victim entityPierce County Library System

Incidentdiscovered Oct 10, 2025

Stated responsePromptly took steps to secure its systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov