MalwareEducationEducationRansomwareRansom DemandedData EncryptedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Judge Rotenberg Educational Center
bd_1ae9ac17bf17d61a · schema v1 · pii pii-v1
Full breach record for Judge Rotenberg Educational Center →On February 13, 2024, Judge Rotenberg Educational Center (JRC), an educational institution in Canton, MA, discovered a ransomware attack. A forensic investigation determined on March 25, 2024 that data was impacted. On September 5, 2024, JRC confirmed personal information (names) was affected. 3,511 individuals were impacted total, including 5 Maine residents. Consumers were notified October 3, 2024, and offered complimentary credit monitoring via TransUnion/Cyberscout.
Maine clockDiscovered Feb 13, 2024 → Filed with AG Oct 3, 2024233d ✗ ME AG >90d33 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 203 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_faeaf3bf40788172Leak Siteblacksuitfiled 2024-03-13(204d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_44c29b17009a3d3eIndiana State AGfiled 2024-10-03Verified
- bd_6a5e9832c6b9356dVermont State AGfiled 2024-10-03Verified
- bd_7c4bc858c4230853HHS OCRfiled 2024-10-03Verified
- bd_90ab31acdce24677New Hampshire State AGfiled 2024-10-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dad96d93-414b-44aa-b111-1baab88ee21f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2024
- Raw hash
- bfba9e755b40c79668ce7b0c8495747c8b4e2504c6cce23580d33abf09fe37f3
Reporting entity
- Name
- Judge Rotenberg Educational Centernorm: judge rotenberg educational center
- Domain
- judgerc.org
- Industry
- Education
Victim entity
- Name
- Judge Rotenberg Educational Centernorm: judge rotenberg educational center
- Domain
- judgerc.org
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Feb 13, 2024
- Materiality determined
- Sep 5, 2024
- Notification sent
- Oct 3, 2024
- Affected individuals
- 5
- Data types
- PII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported to federal law enforcement
Compliance
- Time to disclose
- 33 weeks(233 days from discovery to filing)
- Compliance flags
- ME AG >90d · 233dME resident >180d · 233dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 13, 2024→ Filed with AG: Oct 3, 2024233d 90 days ME AG >90d Maine Discovered: Feb 13, 2024→ Notified: Oct 3, 2024233d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.