HackingEducationEducationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

School District of Elmbrook

bd_132e2b67c110056b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2023

Filed

Mar 20, 2023

To disclose

21 days

Affected

1state residents only

Linked

7 records

Confidence

65%

Full breach record for School District of Elmbrook →

School District of Elmbrook notified NH AG of unauthorized network access Aug 23-27, 2022. Discovered Feb 27, 2023 via forensic review. Files containing personal info of 1 NH resident removed. District engaged external cybersecurity pros, offered 1-year credit monitoring. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d21 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 188 days

discovery → filing · 21 days

Aug 23, 2022

Begins

Feb 27, 2023

Discovered

Mar 20, 2023

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by vicesociety about this victim was first seen 197 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitevicesocietybd_7f2b03a8cf189ee72022-09-04 · +197dVerified by operator

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_c7b6cdac2a0616dd2023-03-16 · +4dVerified by operator
Massachusetts State AGbd_f7b07cb2af127ba42023-03-16 · +4dVerified by operator
Vermont State AGbd_07f8e00999ac259b2023-02-24 · +24dCandidate
Indiana State AGbd_3d648f4b42e330982022-09-23 · +178dVerified by operator

Show 1 more filing ↓up to 178d gap

Maine State AGbd_7a271ebaf508f2b02022-09-23 · +178dVerified by operator

Name: School District of Elmbrook
norm: school district of elmbrook

Name: School District of Elmbrook
norm: school district of elmbrook
Industry: Educationllm

Discovered: Feb 27, 2023
Breach occurred: Aug 23, 2022 – Aug 27, 2022
Undetected for: 188 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Conducted an extensive forensic investigation and manual document review
Providing the affected resident with written notification
Offering the affected resident complimentary one-year membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGSep 23 · first

Maine State AGSep 23 · first

Vermont State AG+154d

Montana State AG+174d

Massachusetts State AG+174d

New Hampshire State AG+178d · this page

Pattern: first filing Sep 23 (IN), last Mar 20 (NH) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/school-district-elmbrook-20230320.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2023
Raw hash: cb77979850d949a75e1ced09cbf1d0264d6430f79e1d37d18f6e560bae82c61e

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entitySchool District of Elmbrook

Victim entitySchool District of Elmbrook

Incidentdiscovered Feb 27, 2023

Stated responseCommenced a prompt and thorough investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov