DisclosureLens
HackingGovernmentGovernmentStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDMediumActive

City of Hayward, Minnesota

bd_c85af40eea4341b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 30, 2024

Filed

Jan 29, 2025

To disclose

4 weeks

Affected

10state residents only

Linked

9 filings

Confidence

66%
Full breach record for City of Hayward, Minnesota

City of Hayward notified NH AG of a data security incident occurring on July 9, 2023, where an unauthorized actor downloaded files containing personal information. The City discovered the impact on personal data on December 30, 2024. Approximately 10 New Hampshire residents were affected. The City engaged cybersecurity professionals, notified the FBI, and is providing credit monitoring services.

Incident timeline

undetected · 540 days
discovery → filing · 4 weeks / 30 days

Jul 9, 2023

Begins

Dec 30, 2024

Discovered

Jan 29, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 2d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
California State AGJan 29 · first
Indiana State AGJan 29 · first
Maryland State AGJan 29 · first
Massachusetts State AGJan 29 · first
Nebraska State AGJan 29 · first
Vermont State AGJan 29 · first
Montana State AGJan 29 · first
New Hampshire State AGJan 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.