HackingGovernmentGovernmentStolen CredentialsDelayed DiscoveryPIILowContained

City of Twin Falls Economic Development

bd_afe5c7393c58de05 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 18, 2026

Filed

Jun 2, 2026

To disclose

15 days

Affected

1state residents only

Confidence

66%

Full breach record for City of Twin Falls Economic Development →

City of Twin Falls notified Idaho AG of a breach discovered on May 18, 2026, affecting one employee's PII. The City identified the breach internally, removed the access vector, and revised policies. The report acknowledges it is untimely under Idaho law.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 days

May 18, 2026

Begins

May 18, 2026

Discovered

Jun 2, 2026

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: City of Twin Falls Economic Development
norm: city of twin falls economic development
Domain: twinfallsidaho.org

Name: City of Twin Falls Economic Development
norm: city of twin falls economic development
Domain: twinfallsidaho.org
Industry: Governmentllm

Discovered: May 18, 2026
Breach occurred: May 18, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: acknowledge this report is untimely under the requirements of Idaho Code Section 28-51-105
Initial access: valid_credentials

During the incident: The City’s IT Department was able to identify the breach itself
The means by which the breach was accomplished has been removed
The City has since revised its policies and practices to avoid this in the future
This employee has been notified
Changes made: The City has since revised its policies and practices to avoid this in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/06/2026.06.01-City-of-Twin-Falls.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2026
Raw hash: d90eb0a8d722b2491b6111aa4f25ec42cdf31ac5372090026f9ea79a5bc8183a

Reporting entityCity of Twin Falls Economic Development

Victim entityCity of Twin Falls Economic Development

Incidentdiscovered May 18, 2026

Stated responseThe City’s IT Department was able to identify the breach itself

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov