HackingData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumActive
Sugar-Salem School District #322
bd_06e72d4514b3393c · schema v1 · pii pii-v1
Full breach record for Sugar-Salem School District #322 →Sugar-Salem School District No. 322, Liberty Charter School, and Victory Charter School reported a cybersecurity incident involving their third-party vendor, PowerSchool. The incident, discovered on January 7, 2025, exposed Idaho residents' names and Social Security numbers. The Schools engaged legal counsel and a forensic firm, confirming the breach of personal information under Idaho law. Notice was filed with the Idaho Attorney General on January 21, 2025, with plans to notify affected individuals and offer credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-21-2025-Sugar-Salem-School-District-No.-322.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 21, 2025
- Raw hash
- bb1b54ac2d1e84e2ab69b76fe008f77f94f3ef7373311ce620c0fea720abc16a
Reporting entity
- Name
- ECKERT SEAMANS CHERIN & MELLOTT, LLCnorm: eckert seamans cherin mellott
Victim entity
- Name
- Sugar-Salem School District #322norm: sugar salem school district 322
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Provided notice to Idaho Attorney General Consumer Protection Division
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.