HackingEducationEducationCustomer Data InvolvedTargetedIdentity (basic)PIILowContained

Great Valley School District

bd_1b4d9147832b5c5f · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 10, 2023

Filed

Dec 19, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

4 records

Confidence

66%

Full breach record for Great Valley School District →

Great Valley School District notified consumers of a data breach occurring between Oct 31 and Nov 10, 2023. An unauthorized actor accessed systems, potentially viewing names and addresses. The District engaged third-party cybersecurity specialists and offers 12-24 months of Equifax credit monitoring. No specific count of affected individuals was provided in the filing.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 6 weeks / 39 days

Oct 31, 2023

Begins

Nov 10, 2023

Discovered

Nov 28, 2023

Scope determined

Dec 19, 2023

Filed

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_5cd3a6189dd59c622023-11-29 · +20dVerified by operator

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_3784ca3dba2c993b2023-12-19Verified by operator
Massachusetts State AGbd_7bb1b7c02ea279132023-12-19Verified by operator

Name: Great Valley School District
norm: great valley school district
Domain: gvhs.gvsd.org

Name: Great Valley School District
norm: great valley school district
Domain: gvhs.gvsd.org
Industry: Educationllm

Discovered: Nov 10, 2023
Breach occurred: Oct 31, 2023 – Nov 10, 2023
Undetected for: 10 daysoccurrence → discovery
Materiality determined: Nov 28, 2023
Notification sent: Dec 19, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notice with Vermont Attorney General
Initial access: exploit_public_facing

During the incident: Launched an investigation, with the assistance of third-party cybersecurity specialists
Offering credit monitoring and identity restoration services through Equifax for 12/24 months, at no cost to you
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGDec 19 · first

Massachusetts State AGDec 19 · first

Vermont State AGDec 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-19-great-valley-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 19, 2023
Raw hash: 9e86b6f514977d47d52510f6f2659a543f386d3a7cd40c8733881a3d79530e3a

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityGreat Valley School District

Victim entityGreat Valley School District

Incidentdiscovered Nov 10, 2023

Stated responseLaunched an investigation, with the assistance of third-party cybersecurity specialists

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov