HackingCustomer Data InvolvedPIIMediumContained
Wisconsin Education Association Council
bd_f383792ad6ba2d1a · schema v1 · pii pii-v1
Full breach record for Wisconsin Education Association Council →The Wisconsin Education Association Council experienced an external system breach (hacking) on October 27, 2025. The incident affected 2,514 individuals, including 2 Maine residents. The organization provided 12 months of complimentary credit monitoring and identity theft protection services through Haystack ID to affected individuals.
Maine clockDiscovered Oct 27, 2025 → Filed with AG May 11, 2026196d ✗ ME AG >90d28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_af320ddedf4f8fcdIndiana State AGfiled 2026-05-11Verified by operator
- bd_34fa96b29e62c897New Hampshire State AGfiled 2026-05-08(3d gap)Verified
- bd_edad82c797a8be53Massachusetts State AGfiled 2026-05-01(10d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8035dba7-5367-4944-9ee9-89d8b0454459.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 11, 2026
- Raw hash
- b55983faa4f3ca26b92cab42a2901edfc6d6b2d132d210818afb2a2e73724343
Reporting entity
- Name
- Wisconsin Education Association Councilnorm: wisconsin education association council
Victim entity
- Name
- Wisconsin Education Association Councilnorm: wisconsin education association council
Incident
- Discovered
- Oct 27, 2025
- Materiality determined
- —
- Notification sent
- May 11, 2026
- Affected individuals
- 2,514
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 weeks(196 days from discovery to filing)
- Compliance flags
- ME AG >90d · 196dME resident >180d · 196d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 27, 2025→ Filed with AG: May 11, 2026196d 90 days ME AG >90d Maine Discovered: Oct 27, 2025→ Notified: May 11, 2026196d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.