MalwareEducationEducationRansomwarePhishingInterlockRansom DemandedData ExfiltratedCustomer Data InvolvedMulti-Stage ChainPIIIdentity (basic)LowContained

Fowler Elementary School District #45

bd_0a1431684800582c · schema v1 · pii pii-v2

Severity

Low

Discovered

May 3, 2025

Filed

Nov 18, 2025

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Fowler Elementary School District #45 →

Fowler Elementary School District 45 (Nebraska) notified individuals on November 18, 2025, of a ransomware incident discovered on May 3, 2025. A third-party threat actor claiming to be 'Interlock' gained access via social engineering targeting a contractor. The incident involved data encryption and potential exposure of personal information. The District engaged IDX for identity protection services, including credit monitoring and ID theft recovery.

J jump to incidentP pin to compareR raw source

Incident timeline

May 3, 2025

Begins

May 3, 2025

Discovered

Nov 18, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGInterlockbd_9ba82706172c8c1b2025-11-18Verified
Indiana State AGbd_bda5e68207672e1d2025-11-18Candidate
Massachusetts State AGbd_4bf775a937651b8c2025-11-19 · +1dVerified

Name: Fowler Elementary School District #45
norm: fowler elementary school district 45

Name: Fowler Elementary School District #45
norm: fowler elementary school district 45
Industry: Educationllm

Discovered: May 3, 2025
Breach occurred: May 3, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 18, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Ransomware· Interlock
MITRE ATT&CK: T1566.002 Spearphishing LinkT1486 Data Encrypted for Impact
Threat actor: InterlockExternalFinancial
Initial access: phishing_link

During the incident: Reviewed its internal procedures and enhanced its security awareness
Secured the services of IDX , the data breach and recovery services expert
Provided 12/24 months of credit and CyberScan monitoring
Provided a $1,000,000 insurance reimbursement policy
Provided fully managed ID theft recovery services
Changes made: Enhanced its security awareness
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGNov 18 · first

Indiana State AGNov 18 · first

Nebraska State AGNov 18 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/ef43c17a-a118-4aeb-b40c-59f6785b4fc3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 18, 2025
Raw hash: effc5a5873b066e7b28307318f22c99047e8a230325c55fcf9c3a0f370764c37

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFowler Elementary School District #45

Victim entityFowler Elementary School District #45

Incidentdiscovered May 3, 2025

Stated responseReviewed its internal procedures and enhanced its security awareness

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov