HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTIDENTITY_BASICMediumActive
Castleford School District No. 417
bd_08f24941ffd373ed · schema v1 · pii pii-v1
Full breach record for Castleford School District No. 417 →Castleford School District No. 417 (Idaho) disclosed a data breach involving its PowerSchool information system. On January 9, 2025, third-party vendor TruLeap Technologies confirmed data was exported from PowerSchool, contradicting an earlier notification from PowerSchool on January 7 that data was not impacted. The incident involves student PII and government IDs. The district notified state education officials and the Idaho Attorney General.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-10-2025-Castlford-School-District-No.-417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2025
- Raw hash
- 95726169825e151cecb846e0fdacbe72ed1880248019b98f8f49a9cde8dae177
Reporting entity
- Name
- Castleford School District No. 417norm: castleford school district no 417
Victim entity
- Name
- Castleford School District No. 417norm: castleford school district no 417
Incident
- Discovered
- Jan 9, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified Executive Director of the State Board of EducationNotified State Superintendent of Public InstructionNotified Idaho Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.