HackingCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTCriticalContained
City of Suffolk Virginia
bd_c52256f6a07e9db5 · schema v1 · pii pii-v1
Full breach record for City of Suffolk Virginia →The City of Suffolk, VA, reported an external system breach (hacking) occurring on February 24, 2026, discovered on February 25, 2026. The incident affected 157,724 individuals, including 93 Maine residents. Personal identifiers and government IDs were compromised. Written notification was sent on April 22, 2026.
Maine clockDiscovered Feb 25, 2026 → Filed with AG May 26, 202690d ⏱ ME AG >30d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
N1 · Nationwide count promoted
Affected · nationwide
157,724
ME slice (headline)
93· 0.1% of total
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2e5262f6c8a9b26bTexas State AGfiled 2026-04-22(34d gap)Candidate
- bd_9da122387e5abb26Indiana State AGfiled 2026-04-22(34d gap)Verified
- bd_658ce4bb4e6a0629New Hampshire State AGfiled 2026-04-20(36d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d517d5ee-5cac-4248-843b-8a14b9074f57.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2026
- Raw hash
- b563ab63d5fcc1fd2084adb3c230bd05ba22b5ceebc9464b3f88297afc8c0354
Reporting entity
- Name
- City of Suffolk Virginianorm: city of suffolk virginia
Victim entity
- Name
- City of Suffolk Virginianorm: city of suffolk virginia
Incident
- Discovered
- Feb 25, 2026
- Materiality determined
- —
- Notification sent
- Apr 22, 2026
- Affected individuals
- 157,724
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- ME AG >30d · 90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 25, 2026→ Filed with AG: May 26, 202690d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.