HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICHEALTH_BASICLowActive
Meridian Technical Charter High School
bd_018b76909486bc65 · schema v1 · pii pii-v1
Full breach record for Meridian Technical Charter High School →Meridian Technical Charter High School notified the Idaho Attorney General on January 9, 2025, of a data breach involving its student information system, PowerSchool. Unauthorized access occurred between December 19 and 23, 2024, via compromised credentials. The breach potentially exposed PII (names, addresses, contact info) and some health/grade data for students, parents, and staff. PowerSchool engaged CrowdStrike and CyberSteward, notified law enforcement, and provided credit monitoring for adults and identity protection for minors.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-9-2025-Meridian-Technical-Charter-High-School.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2025
- Raw hash
- fbe766892ad8e1f24a78946c8cdbe8d28e7b9090135ed45415dc5d8658749942
Reporting entity
- Name
- Meridian Technical Charter High Schoolnorm: meridian technical charter high school
- Domain
- mtchs.org
Victim entity
- Name
- Meridian Technical Charter High Schoolnorm: meridian technical charter high school
- Domain
- mtchs.org
Incident
- Discovered
- Dec 28, 2024
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notify the Executive Director of the State Board of Educationnotify the State Superintendent of Public Instructionnotify the AttorneyGeneral
- Third party
- via PowerSchool
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.