The City of Roanoke, Virginia, notified the New Hampshire Attorney General of a business email compromise incident. Unauthorized access occurred on or about March 26, 2026, and was discovered on April 2, 2026. The attack involved a malicious actor gaining access to departmental data, resulting in the potential exposure of Social Security numbers and financial account information for one individual. The City engaged third-party experts, notified law enforcement, and terminated access.
Affected (this filing): 1