DisclosureLens
HackingEducationEducationSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIdentity (basic)EducationLowActive

Madison School District No. 321

bd_26685469147a5603 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 9, 2025

Filed

Jan 10, 2025

To disclose

≤1 day

Affected

Not disclosed

Confidence

65%
Full breach record for Madison School District No. 321 →

Madison School District No. 321 (Idaho) notified the Idaho Attorney General on January 10, 2025, of a cybersecurity incident involving its third-party vendor, PowerSchool. The incident resulted in unauthorized access to student and teacher contact information (names and addresses). The district blocked IP addresses and notified law enforcement.

Incident timeline

discovery → filing · ≤1 day / 1 days

Jan 9, 2025

Discovered

Jan 10, 2025

Filed

vs. sector median

8 wks faster

Part of PowerSchool supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.