DisclosureLens
GLOBALMalwareEducationEducationRansomwareBlackbyteRansom DemandedActor NamedMedium

Chambersburg Area School District

bd_0c4f976668651ce3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 7, 2023

To disclose

—

Affected

Not disclosed

Linked

7 records

Confidence

50%
Full breach record for Chambersburg Area School District →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Blackbyte on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: EducationDiscovered: 2023-09-07

Source: Ransomware.live

Post text · scraped from the leak site

The Chambersburg Area School District covers 250 square miles in Franklin County, Pennsylvania, near the center of the Cumberland Valley. More than 61,000 people live in the district, which is composed of the Borough of Chambersburg, Greene, Hamilton, Letterkenny, and Lurgan townships, and most of Guilford Township. The Chambersburg Area School District has a rich and important history. We are fortunate to have almost 10,000 students of many different backgrounds and nations of origin. Just in the past several years, our English Language Learners have increased from approximately 500 to 1000 students or 10% of our student population.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Sep 7, 2023

Claim posted

—

Corroborated · see linked filings

This record's own dates cannot anchor compliance clocks; see the linked filings.

Claim → filing

—

Compliance clock

Not assessable

This leak-site claim is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 49d gap

Press reports (1)

Filing propagation · 5 filings · 5 states

View merged incident ↗
Massachusetts State AGOct 26 · first
Maine State AGOct 26 · first
Vermont State AGOct 26 · first
New Hampshire State AGOct 26 · first
Indiana State AGOct 26 · first

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2021-10-04

blackbyte

According to ransomware.live, Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.

147 victims claimed globally147 tracked hereFull profile →