AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

City of Keene, New Hampshire

bd_ee08c6641009ff09 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 23, 2026

Filed

Sep 1, 2026

To disclose

6 weeks

Affected

43state residents only

Confidence

70%

The City of Keene, New Hampshire, experienced an inadvertent email disclosure on July 23, 2026, where an unredacted document containing names and Social Security numbers was sent to 43 New Hampshire residents. The City recalled the message, investigated, and confirmed the data exposure on July 29, 2026. Affected individuals were notified in late August 2026 and offered 12 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Jul 23, 2026

Begins

Jul 23, 2026

Discovered

Sep 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed43 affectedView incident

Name: City of Keene, New Hampshire
norm: city of keene

Name: City of Keene, New Hampshire
norm: city of keene
Domain: keene.nh.us
Industry: Governmentllm

Discovered: Jul 23, 2026
Breach occurred: Jul 23, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 28, 2026
Affected individuals: 43state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Recalled the message
Launched an investigation
Contacted the unintended recipients requesting confirmation of deletion
Notified all potentially impacted individuals
Provided written notice on or about August 28, 2026
Changes made: Providing all notified individuals with complimentary identity monitoring services through Kroll for a period of 12 months
Strengthened our safeguards to prevent such inadvertent disclosure in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/city-of-keene-20260901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 2531e06db9b2b1839becfd0ba801b35216c5d7bf584573791ba1aad8a02e0956

Reporting entityCity of Keene, New Hampshire

Victim entityCity of Keene, New Hampshire

Incidentdiscovered Jul 23, 2026

Stated responseRecalled the message

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov