HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Nampa School District

bd_1306561617b21585 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 14, 2018

To disclose

—

Affected

13state residents only

Linked

2 filings

Confidence

66%

Full breach record for Nampa School District →2 incidents on file

Nampa School District notified employees of unauthorized access to a single email account containing PII (names, SSNs, birthdates, financial info). Access was from outside the country. The district engaged Navigant for forensics, enabled DLP, enforced MFA, and offered 1 year of identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 14, 2018

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_a426308a6e1e930e2018-03-20 · +6dVerified

Name: Nampa School District
norm: nampa school district

Name: Nampa School District
norm: nampa school district
Industry: Educationllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the state Office of the Attorney General and other state officials of the incident
Initial access: valid_credentials

During the incident: Initiating an internal investigation
Retaining an independent forensic investigation firm to assist us in our investigation of and response to this incident
Enabled Data Loss Prevention (DLP) in Office 365
Updated our retention policy for district emails
Initiating new password requirements
Required some users to utilize multi-factor authentication
New cybersecurity awareness training requirements that will be sent to all employees
Offering one year of complimentary identity protection services
Changes made: Enabled Data Loss Prevention (DLP) in Office 365
Updated our retention policy for district emails
Initiating new password requirements
Required some users to utilize multi-factor authentication
New cybersecurity awareness training requirements
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGMar 14 · first · this page

Massachusetts State AG+6d

Pattern: first filing Mar 14 (MT), last Mar 20 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Nampa-School-District-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2018
Raw hash: ec06720d57d1b78e99cac75d192cd7f2c34d3c9365afc67612bfeb0bad17a3af

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNampa School District

Victim entityNampa School District

IncidentUnauthorized Access

Stated responseInitiating an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov