HackingEducationEducationStolen CredentialsCapture App DataDelayed DiscoveryCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumResolved
Rockland BOCES
bd_0a9fff7b87f1b587 · schema v1 · pii pii-v1
Full breach record for Rockland BOCES →Rockland BOCES reported an email account compromise discovered on December 7, 2023. An unauthorized party accessed an employee's email account, potentially exposing names, Social Security numbers, driver's license or state ID numbers, and treatment/diagnosis information. Approximately 3 Maryland residents were affected. Notification was completed in January 2025 after a comprehensive data review concluded in November 2024.
Maryland clock✗ MD AG >90d30 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2026
- Raw hash
- 2a3d1f5599e6eb5ae9923a3a85e990ffc08bb56df347e9eed409453043f5fab2
Reporting entity
- Name
- Rockland BOCESnorm: rockland boces
Victim entity
- Name
- Rockland BOCESnorm: rockland boces
- Industry
- Educationllm
Incident
- Discovered
- Dec 7, 2023
- Materiality determined
- —
- Notification sent
- Jan 7, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General Office of Security Breach
Compliance
- Time to disclose
- 30 months(894 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.