PhysicalEducationEducationTheftCustomer Data InvolvedGovernment IDHighResolved

David Douglas School District

bd_241d1e6c4916961e · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 29, 2023

Filed

Feb 24, 2023

To disclose

26 days

Affected · nationwide

3,4281 in this filing

Linked

5 filings

Confidence

50%

Full breach record for David Douglas School District →4 incidents on file

David Douglas School District reported a data breach affecting one Maine resident. The breach occurred and was discovered on January 29, 2023, and involved the loss or theft of a device containing personal information, including a Social Security number. The district notified the affected individual on February 24, 2023, and offered 12 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 29, 2023 → Filed with AG Feb 24, 202326d ✓ ME AG ≤30d26 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 days

Jan 29, 2023

Begins

Jan 29, 2023

Discovered

Feb 24, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_19b5a68c37b7e15c2023-02-24Candidate
Oregon State AGbd_2453c17079f733d22023-02-24Verified
New Hampshire State AGbd_25bdcdaae997d8d92023-02-24Verified
Massachusetts State AGbd_dd6f547c920331b92023-02-24Verified

Name: David Douglas School District
norm: david douglas school district
Domain: ddouglas.k12.or.us

Name: David Douglas School District
norm: david douglas school district
Domain: ddouglas.k12.or.us
Industry: Educationllm

Discovered: Jan 29, 2023
Breach occurred: Jan 29, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 24, 2023
Affected individuals: 3,428state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unknown

Changes made: Offered 12 months of identity theft protection services from IDX, including credit monitoring, dark web monitoring, and a $1M insurance reimbursement policy.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: ME AG ≤30d · 26d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 29, 2023
→ Filed with AG: Feb 24, 2023
26d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 29, 2023 → Filed with AG: Feb 24, 2023	26d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGFeb 24 · first

Oregon State AGFeb 24 · first

New Hampshire State AGFeb 24 · first

Massachusetts State AGFeb 24 · first

Maine State AGFeb 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7d9c6ffc-1520-450a-a7c4-b3a124d34e83.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2023
Raw hash: 2be95db40ae845c2216811f5370eb582eb0537b02b744d9ba3958a874b600a2f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDavid Douglas School District

Victim entityDavid Douglas School District

Incidentdiscovered Jan 29, 2023

Stated responseOffered 12 months of identity theft protection services from IDX, including credit monitoring, dark web monitoring, and a $1M insurance reimbursement policy.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov