HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedSupply Chain (3P Vendor)IDENTITY_GOVERNMENTIDENTITY_BASICCREDENTIALSMediumContained
Kamiah Joint School District No. 304
bd_1caf056208d16be0 · schema v1 · pii pii-v1
Full breach record for Kamiah Joint School District No. 304 →Kamiah Joint School District No. 304 notified the Idaho Attorney General on January 10, 2025, of a cybersecurity incident involving its PowerSchool Student Information System. An unauthorized party accessed student and teacher data using compromised credentials. Affected data includes SSNs, names, and contact information. The district engaged forensic firms (CyberSteward, CrowdStrike) and negotiated data destruction. Notification was sent to families and staff on January 10, 2025.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-10-2025-Kamiah-Joint-School-District-No.-304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2025
- Raw hash
- ba3de0ddd924a93733b374dbaba8b05afc5cbf9e6f9a41aa49990a0148e5debd
Reporting entity
- Name
- Kamiah Joint School District No. 304norm: kamiah joint school district no 304
- Domain
- kamiahsd.org
Victim entity
- Name
- Kamiah Joint School District No. 304norm: kamiah joint school district no 304
- Domain
- kamiahsd.org
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Idaho Attorney General’s Office Consumer Protection Division
- Third party
- via PowerSchool
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.