DisclosureLens
Leak SitePressState AGConfirmed5 records · 3 statesLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedinterlockhigh sensitivity
Merged incident · 5 records

Winona County — March 2026 breach

Clustered 5 records across 3 jurisdictions: 3 filings, 1 press report and 1 leak-site claim · filing window Oct 8, 2026 → Oct 14, 2026 (dated filings only). View entity profile → Other incidents for this victim →

⚠ 1 cross-filing discrepancy →Merge100%

Determination

Confirmed

Members

5 records

States

3

Affected · reported

16

First → last dated filing

Oct 8, 2026 → Oct 14, 2026

Merge confidence

100%

incident inc_89dbfe098c1141b1 · merged by human · confidence 100%

Confirmed breach. Merged as one breach: 3 regulatory filings, 1 press report and 1 unverified claim. The filings describe a ransomware attack. Intrusion Mar 13, 2026–Apr 30, 2026, discovered Apr 7, 2026. 16 individuals reported across the linked filings. Data reported: Government ID, PII, and Identity (basic). Each member filing remains the legal record for its jurisdiction.

Litigation Timing

Supplemental
Filing span
6days

Time between earliest and latest filing

Not recorded for this incident

Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no SEC 8-K in this cluster; needs two dated filings.

Regulatory clocksLeak gap⏱ Leak >90dFull clock table in Litigation Timeline

The weekly clock on records like this one

The Disclosure Clock is a weekly briefing on what landed in the disclosure record, and the gap between the criminals' post and the regulator's filing — measured on the whole record, with the method shown.

Weekly. Double opt-in, one-click unsubscribe, and the address goes nowhere else.

Winona County data breach (2026) — filings in 3 jurisdictions, May 2026 · DisclosureLens