HackingGovernmentGovernmentCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Town of Bedford
bd_e067d4e68b10fb64 · schema v1 · pii pii-v1
Full breach record for Town of Bedford →Town of Bedford (Bedford, MA) detected unauthorized activity on its email system on November 19, 2024, with the breach occurring on July 30, 2024. A third-party forensic investigation determined that files related to legal matters were stored in a network location subject to unauthorized access, potentially compromising names and Social Security numbers. 3 Maine residents were among 1,479 total individuals affected. Credit monitoring services offered via TransUnion/Cyberscout for 12 months.
Maine clockDiscovered Nov 19, 2024 → Filed with AG May 29, 2025191d ✗ ME AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a3b5d883-ea77-461d-b994-68887917164c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2025
- Raw hash
- be798c3c46474fdc769d430615e3a46a81617c1866b13a24947386b95453133c
Reporting entity
- Name
- Town of Bedfordnorm: town of bedford
- Industry
- Other Government Entity
Victim entity
- Name
- Town of Bedfordnorm: town of bedford
- Industry
- Other Government Entity
- Industry
- Governmentllm
Incident
- Discovered
- Nov 19, 2024
- Materiality determined
- —
- Notification sent
- May 23, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Law enforcement collaboration noted in notification letter
Compliance
- Time to disclose
- 27 weeks(191 days from discovery to filing)
- Compliance flags
- ME AG >90d · 191dME resident >180d · 185d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 19, 2024→ Filed with AG: May 29, 2025191d 90 days ME AG >90d Maine Discovered: Nov 19, 2024→ Notified: May 23, 2025185d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.