HackingEducationEducationCustomer Data InvolvedDelayed DiscoveryPIIMediumContained
Portland Public Schools
bd_24c550503f100c93 · schema v1 · pii pii-v1
Full breach record for Portland Public Schools →Portland Public Schools (Portland, ME) experienced unauthorized access to its network on or about February 2, 2025. The breach was not discovered until January 6, 2026 following an extensive forensic investigation. Personal information of approximately 12,128 individuals was potentially accessed, including 5,183 Maine residents. Affected individuals were notified on January 30, 2026 and offered 12-month Experian IdentityWorks credit monitoring.
Leak gap clock✗ Leak >180d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 390 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_7d0298ae14e91fecIndiana State AGfiled 2026-01-30Verified by operator
- bd_c089e457a397121dVermont State AGfiled 2026-01-30Verified
- bd_c67522245a0e6714New Hampshire State AGfiled 2026-02-05(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ba471657-be17-411d-a052-4855948d499c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2026
- Raw hash
- ab81858a050936983c169bc53be14c470876993b58da8ad9ecef6277f6590b6a
Reporting entity
- Name
- Portland Public Schoolsnorm: portland public schools
- Domain
- portlandschools.org
- Industry
- Education
Victim entity
- Name
- Portland Public Schoolsnorm: portland public schools
- Domain
- portlandschools.org
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Jan 6, 2026
- Materiality determined
- Jan 6, 2026
- Notification sent
- Jan 30, 2026
- Affected individuals
- 5,183
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 6, 2026→ Filed with AG: Jan 30, 202624d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.