HackingDelayed DiscoveryIDENTITY_BASICLowContained
Cattaraugus-Allegany Board of Cooperative Education Services
bd_027a3b2aa7b65d80 · schema v1 · pii pii-v1
Full breach record for Cattaraugus-Allegany Board of Cooperative Education Services →Cattaraugus-Allegany BOCES notified individuals of a cyber-attack occurring between July 5 and July 20, 2023, which may have exposed names and other personal information. The organization secured its network, engaged federal law enforcement, and is offering 24 months of credit monitoring via Experian. A small number of Rhode Island residents were specifically identified as impacted.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_36bde85a5f6bf995Montana State AGfiled 2024-04-04Candidate
- bd_588a30bfcf620ca9New Hampshire State AGfiled 2024-04-04Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-04-cattaraugus-allegany-board-cooperative-education-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2024
- Raw hash
- 951ba607b6eccc1736918d2ea599aee988aaa18f56281fed223ecbcacd2fa820
Reporting entity
- Name
- Cattaraugus-Allegany Board of Cooperative Education Servicesnorm: cattaraugus allegany board of cooperative education
Victim entity
- Name
- Cattaraugus-Allegany Board of Cooperative Education Servicesnorm: cattaraugus allegany board of cooperative education
Incident
- Discovered
- Jul 5, 2023
- Materiality determined
- —
- Notification sent
- Apr 4, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Prompt and continued correspondence with federal law enforcement authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(274 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.