HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
City of Hayward, Minnesota
bd_c85af40eea4341b4 · schema v1 · pii pii-v1
Full breach record for City of Hayward, Minnesota →City of Hayward notified NH AG of a data security incident occurring on July 9, 2023, where an unauthorized actor downloaded files containing personal information. The City discovered the impact on personal data on December 30, 2024. Approximately 10 New Hampshire residents were affected. The City engaged cybersecurity professionals, notified the FBI, and is providing credit monitoring services.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_07b9796ec86c247fCalifornia State AGfiled 2025-01-29Verified
- bd_23584d2513e0424fIndiana State AGfiled 2025-01-29Verified
- bd_31b23c8ba48b2281Maryland State AGfiled 2025-01-29Verified
- bd_e6c7af17315c5953Vermont State AGfiled 2025-01-29Verified
Show 2 more filings ↓Show fewer ↑up to 2d gap
- bd_ebf17f268801e42bMontana State AGfiled 2025-01-29Verified
- bd_999d64041fc82d93Maine State AGfiled 2025-01-31(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/city-hayward-20250129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2025
- Raw hash
- 28f5da0475681a7bc434e8bcc9311d86667be3a876b8eb4a96b02a9be9f3fc33
Reporting entity
- Name
- City of Hayward, Minnesotanorm: city of hayward minnesota
Victim entity
- Name
- City of Hayward, Minnesotanorm: city of hayward minnesota
Incident
- Discovered
- Dec 30, 2024
- Materiality determined
- —
- Notification sent
- Jan 29, 2025
- Affected individuals
- 10
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.