HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEDUCATIONMediumActive
Edmonds School District
bd_1b4de5792e8a0263 · schema v1 · pii pii-v1
Full breach record for Edmonds School District →Edmonds School District notified the NH AG of unauthorized network access between Jan 16-31, 2023. Suspicious activity detected Jan 31, 2023. Data at risk includes PII, SSNs, financial, medical, and education records. 1 NH resident affected. Investigation ongoing with third-party forensic specialists. Credit monitoring offered.
Leak gap clock⏱ Leak >90d15 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 107 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_946936f7fcb626adLeak Siteakirafiled 2023-08-24(99d gap)Verified
- bd_a3c1da9ae24ac523Leak Siteakirafiled 2023-01-31(107d gap)Candidate
Regulatory filings (3) · sorted by filing gap
- bd_a760a2957dc163faMaine State AGfiled 2023-05-15(3d gap)Verified
- bd_8fbc9c1b971a5993New Hampshire State AGfiled 2023-10-06(141d gap)Verified
- bd_de1acf46bdc56b2cWashington State AGfiled 2023-10-06(141d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/edmonds-school-district-20230518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2023
- Raw hash
- 549c4a3ac4614208b4506b66a34e701f4e01add862d690c71d140f42f92861f6
Reporting entity
- Name
- Edmonds School Districtnorm: edmonds school district
- Domain
- edmonds.wednet.edu
Victim entity
- Name
- Edmonds School Districtnorm: edmonds school district
- Domain
- edmonds.wednet.edu
Incident
- Discovered
- Jan 31, 2023
- Materiality determined
- Apr 26, 2023
- Notification sent
- May 15, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEDUCATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney Generalproviding written notice of this incident to state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.