HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
School District of Elmbrook
bd_132e2b67c110056b · schema v1 · pii pii-v1
Full breach record for School District of Elmbrook →School District of Elmbrook notified NH AG of unauthorized network access Aug 23-27, 2022. Discovered Feb 27, 2023 via forensic review. Files containing personal info of 1 NH resident removed. District engaged external cybersecurity pros, offered 1-year credit monitoring. Investigation ongoing.
Leak gap clock✗ Leak >180d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by vicesociety about this victim predates this filing by 197 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/school-district-elmbrook-20230320.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 20, 2023
- Raw hash
- cb77979850d949a75e1ced09cbf1d0264d6430f79e1d37d18f6e560bae82c61e
Reporting entity
- Name
- School District of Elmbrooknorm: school district of elmbrook
Victim entity
- Name
- School District of Elmbrooknorm: school district of elmbrook
Incident
- Discovered
- Feb 27, 2023
- Materiality determined
- —
- Notification sent
- Mar 16, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.