HackingEducationEducationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Clark County School District

bd_0857777be8585a97 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 4, 2023

Filed

Jan 2, 2024

To disclose

13 weeks

Affected

3state residents only

Linked

3 filings

Confidence

67%

Full breach record for Clark County School District →3 incidents on file

Clark County School District notified the NH Attorney General of a security incident detected on October 4, 2023. The incident involved unauthorized access to the network, potentially compromising PII of 3 New Hampshire residents. CCSD engaged third-party responders, secured the network, reported to law enforcement, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 90 days

Oct 4, 2023

Discovered

Jan 2, 2024

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_6c84132dd543d7f62023-12-29 · +4dCandidate
Indiana State AGbd_d9e8f2507a75ab242023-12-28 · +5dVerified

Name: Clark County School District
norm: clark county school district

Name: Clark County School District
norm: clark county school district
Industry: Educationllm

Discovered: Oct 4, 2023
Materiality determined: —
Notification sent: Dec 28, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this matter to law enforcement
Initial access: valid_credentials

During the incident: Engaged specialized third-party incident response firms to assist with securing the environment and investigating the incident
Secured and remediated network
Reported this matter to law enforcement
Reviewed and altered its policies and procedures relating to the security of its systems
Provided notification letters to all potentially impacted individuals
Extended an offer of free credit monitoring and identity theft protection services
Changes made: Remediated the vulnerability
Conducted a comprehensive investigation into the incident
Reviewed and altered its policies and procedures relating to the security of its systems and servers and applicant information processing
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGDec 28 · first

Montana State AG+1d

New Hampshire State AG+5d · this page

Pattern: first filing Dec 28 (IN), last Jan 2 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/clark-county-school-district-20240102.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 2, 2024
Raw hash: 6a836340845ea9d77ce4a985d998bc21e4b9494ee239a30999cded6c902ee74c

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityClark County School District

Victim entityClark County School District

Incidentdiscovered Oct 4, 2023

Stated responseEngaged specialized third-party incident response firms to assist with securing the environment and investigating the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov