HackingGovernmentGovernmentStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Lampasas County, Texas

bd_d4021404a047c6c8 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 27, 2025

Filed

Apr 25, 2025

To disclose

8 weeks

Affected · nationwide

3,2631 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Lampasas County, Texas →

Lampasas County, Texas reported a data breach where one employee's email account was accessed without authorization on January 9, 2025. The incident was discovered on February 27, 2025, after an investigation determined that personal information (name, DOB, SSN) of 3,263 individuals was potentially compromised. Notifications were sent on April 23, 2025, offering 12 months of credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 27, 2025 → Filed with AG Apr 25, 202557d ⏱ ME AG >30d8 weeks discovery → filing

Incident timeline

undetected · 49 days

discovery → filing · 8 weeks / 57 days

Jan 9, 2025

Begins

Feb 27, 2025

Discovered

Apr 25, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_7b73b882872e35002025-04-25Verified
New Hampshire State AGbd_8e158500b202d3c12025-04-25Verified
Indiana State AGbd_0f4181177bf6e5372025-04-23 · +2dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Lampasas County, Texas
norm: lampasas county texas
Industry: Governmentllm

Discovered: Feb 27, 2025
Breach occurred: Jan 9, 2025
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 23, 2025
Affected individuals: 3,263state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Maine Attorney General
Initial access: valid_credentials

During the incident: Engaged a leading cybersecurity firm to assist with an investigation
Engaged an independent team to conduct a comprehensive review of all data within the affected mailbox
Provided individuals with information about steps that they can take to help protect their personal information
Offering individuals complimentary identity protection services
Providing a dedicated call center to address any questions individuals may have relating to the incident
Changes made: Implemented additional technical security measures throughout the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: ME AG >30d · 57d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 27, 2025
→ Filed with AG: Apr 25, 2025
57d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 27, 2025 → Filed with AG: Apr 25, 2025	57d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 23 · first

Massachusetts State AG+2d

New Hampshire State AG+2d

Maine State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/64475513-559c-44f5-a943-058230794136.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: 89bb0f672b8df7800be39193a3b49dfcd73932f172a99718fc265782efeff240

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityLampasas County, Texas

Incidentdiscovered Feb 27, 2025

Stated responseEngaged a leading cybersecurity firm to assist with an investigation

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov