PhysicalTheftCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICLowContained
David Douglas School District
bd_064f16d5cc8648a7 · schema v1 · pii pii-v1
Full breach record for David Douglas School District →David Douglas School District notified consumers of a data breach resulting from the theft of a physical hard drive containing employee personal information (names, addresses). The incident was discovered on January 29, 2023. DDSD engaged forensic reviewers, reported to police, and offered credit monitoring. No student data was involved.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-21-david-douglas-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 21, 2023
- Raw hash
- 8e2e88877849bb79b76216ae6a74bd2ba71398e5f248182127b6b4c12a03da93
Reporting entity
- Name
- David Douglas School Districtnorm: david douglas school district
- Domain
- ddouglas.k12.or.us
Victim entity
- Name
- David Douglas School Districtnorm: david douglas school district
- Domain
- ddouglas.k12.or.us
Incident
- Discovered
- Jan 29, 2023
- Materiality determined
- —
- Notification sent
- Jun 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the incident to the Portland Police Bureau
- Initial access
- removable_media
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.