HackingEducationEducationStolen CredentialsTargetedIdentity (basic)LowContained

Minneapolis Public Schools

bd_0b239d4c54fc4882 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 18, 2023

Filed

Sep 5, 2023

To disclose

28 weeks

Affected

20state residents only

Linked

8 records

Confidence

65%

Full breach record for Minneapolis Public Schools →

Minneapolis Public Schools notified individuals of a data breach occurring Feb 6-18, 2023, discovered Feb 18, 2023. Unauthorized access impacted names. MPS reported to law enforcement, secured systems, and offered 24 months of Experian credit monitoring. Notification sent Sept 5, 2023.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d28 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 12 days

discovery → filing · 28 weeks / 199 days

Feb 6, 2023

Begins

Feb 18, 2023

Discovered

Sep 5, 2023

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by medusa about this victim was first seen 182 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_524a24e43eef86032023-02-17 · +200dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_11a17eb8da1f746e2023-09-05Verified
Massachusetts State AGbd_371bdf2738cff1e12023-09-05Verified by operator
Vermont State AGbd_965f8261736818942023-09-05Verified
Maine State AGbd_b96dbece1633723d2023-09-05Verified by operator

Show 1 more filing ↓

New Hampshire State AGbd_c3a500621ad44f582023-09-05Verified by operator

Press reports (1)

Pressmedusabd_f3c4fb86814cf4742023-02-17 · +200dCandidate

Name: Minneapolis Public Schools
norm: minneapolis public schools
Domain: mpls.k12.mn.us

Name: Minneapolis Public Schools
norm: minneapolis public schools
Domain: mpls.k12.mn.us
Industry: Educationllm

Discovered: Feb 18, 2023
Breach occurred: Feb 6, 2023 – Feb 18, 2023
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2023
Affected individuals: 20state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported the event to law enforcement
Initial access: valid_credentials

During the incident: Reported the event to law enforcement
Commenced an investigation
Took steps to secure the MPS environment
Offering you free access to 24 months of credit monitoring and identity theft restoration services through Experian
Changes made: Policies and procedures regarding information security are being reviewed and enhanced
Additional safeguards have been implemented
Additional training is being conducted
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(199 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGSep 5 · first

Massachusetts State AGSep 5 · first

Vermont State AGSep 5 · first

Maine State AGSep 5 · first

New Hampshire State AGSep 5 · first

Montana State AGSep 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-637.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2023
Raw hash: b8f49fe33ee858270618fcf200294235b7c140afba6ba0bbe081f0507bc860dd

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Press reports (1)

Reporting entityMinneapolis Public Schools

Victim entityMinneapolis Public Schools

Incidentdiscovered Feb 18, 2023

Stated responseReported the event to law enforcement

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov