DisclosureLens
HackingGovernmentGovernmentCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

Lorain County Auditor's Office

bd_d5f6fda3b2a13358 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 23, 2025

Filed

Sep 25, 2025

To disclose

18 weeks

Affected

6state residents only

Linked

6 filings

Confidence

66%
Full breach record for Lorain County Auditor's Office

Lorain County Auditor's Office detected unauthorized access to its internal network on May 23, 2025. The incident was immediately contained. A forensic investigation concluded on August 6, 2025, that personal information of approximately six New Hampshire residents was potentially accessed. Affected data included names, dates of birth, driver's license/state ID info, financial account information, digital signatures, and potentially Social Security numbers. Notifications were sent starting September 19, 2025. Credit monitoring was offered to those with SSNs involved.

Incident timeline

discovery → filing · 18 weeks / 125 days

May 23, 2025

Begins

May 23, 2025

Discovered

Sep 25, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 6d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Massachusetts State AGSep 19 · first
Maine State AGSep 19 · first
Vermont State AGSep 19 · first
Indiana State AGSep 19 · first
Nebraska State AGSep 19 · first
New Hampshire State AG+6d · this page

Pattern: first filing Sep 19 (MA), last Sep 25 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.