HackingDelayed DiscoveryIDENTITY_BASICCREDENTIALSLowContained
THE PEDDIE SCHOOL
bd_2bbea5f218dcba15 · schema v1 · pii pii-v1
Full breach record for THE PEDDIE SCHOOL →The Peddie School notified consumers of a data breach where an unknown actor accessed systems between Oct 30 and Dec 22, 2023, copying files containing names and credentials. The incident was discovered in late 2023, with notification sent in March 2025. The FBI was notified, and credit monitoring services are offered to affected individuals.
Vermont clock✗ VT AG >45 bday17 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 392 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_01348cdc5130e715New Hampshire State AGfiled 2025-03-25Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-25-peddie-school-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- b0129f59bf91995c81541a3a08c174b7afdf5d69454038830093260c11c81ab0
Reporting entity
- Name
- THE PEDDIE SCHOOLnorm: the peddie school
- Domain
- peddie.org
Victim entity
- Name
- THE PEDDIE SCHOOLnorm: the peddie school
- Domain
- peddie.org
Incident
- Discovered
- Oct 30, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- reported the incident to the Federal Bureau of Investigation
Compliance
- Time to disclose
- 17 months(512 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.