HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Winona County
bd_c95c5b96a03518fd · schema v1 · pii pii-v1
Full breach record for Winona County →Winona County (MN) reported an external system breach (hacking) occurring between January 18-22, 2026, discovered on April 16, 2026. The incident affected 6,196 individuals, including one Maine resident. The breach involved the acquisition of personal identifiers and government-issued IDs. Winona County provided written notification on May 12, 2026, and offered 12 months of credit and cyber monitoring services through IDX.
Maine clockDiscovered Apr 16, 2026 → Filed with AG May 12, 202626d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0dc45a1d5e2644b3Indiana State AGfiled 2026-05-07(5d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/50b02336-9b53-4da9-8706-12045af2e275.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2026
- Raw hash
- a4ac88fbbeaa291ca6d6c26d924c2a220d32410f0ce7d027b8014644282c08e9
Reporting entity
- Name
- Winona Countynorm: winona county
- Domain
- winonacounty.gov
Victim entity
- Name
- Winona Countynorm: winona county
- Domain
- winonacounty.gov
Incident
- Discovered
- Apr 16, 2026
- Materiality determined
- —
- Notification sent
- May 12, 2026
- Affected individuals
- 6,196
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 16, 2026→ Filed with AG: May 12, 202626d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.