HackingEducationEducationData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

Huntingdon Special School District

bd_2b1ff5a73ad7f796 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 16, 2025

Filed

Mar 11, 2025

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Huntingdon Special School District →

Huntingdon Special School District (TN) notified the Nebraska AG of a third-party data event involving PowerSchool. Between Dec 19-28, 2024, an unknown actor accessed/downloaded data from PowerSchool systems. HSSD determined one Nebraska resident's name and SSN were affected. HSSD notified the resident on March 11, 2025, offered 2 years of Experian credit monitoring, and reported to regulators.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

Dec 19, 2024

Begins

Jan 16, 2025

Discovered

Mar 11, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Part of PowerSchool supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_2cb3eac28e19a1a32025-03-11Verified
Montana State AGbd_ddbb9ffe03a4c08a2025-03-11Candidate

Name: Huntingdon Special School District
norm: huntingdon special school district

Name: Huntingdon Special School District
norm: huntingdon special school district
Industry: Educationllm

Discovered: Jan 16, 2025
Breach occurred: Dec 19, 2024 – Dec 28, 2024
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 11, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: provided written notice of this event to relevant state regulators, as necessary
Third party: via PowerSchool
Initial access: supply_chain

During the incident: Initiated an investigation
Reviewed the information provided by PowerSchool to identify any individuals whose personal information may have been affected
Provided written notice of this event to approximately one (1) Nebraska resident on or about March 11, 2025
Provided notice of this event on its website
Providing individuals whose personal information was involved in this event with access to credit monitoring services for two (2) years through Experian at no cost to the individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators, as necessary, and the three major consumer credit reporting agencies
Changes made: Reviewing its policies and procedures to further protect against similar events occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 11 · first

Montana State AGMar 11 · first

Nebraska State AGMar 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/Huntingdon Special School District - Notice of Data Event - NE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 11, 2025
Raw hash: 355b069438c909505a3c42a9358a4df172570af1bc6ee02fe2259ffe0f28253d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHuntingdon Special School District

Victim entityHuntingdon Special School District

Incidentdiscovered Jan 16, 2025

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov