HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Concord Public Schools and Concord-Carlisle Regional School District
bd_2fa754150def0998 · schema v1 · pii pii-v1
Full breach record for Concord Public Schools and Concord-Carlisle Regional School District →Concord Public Schools and Concord-Carlisle Regional School District experienced an external system breach on April 29, 2024. The incident affected 1,485 individuals, including 5 Maine residents. Compromised data included names and financial account numbers. Notification was sent on June 7, 2024, with 24 months of identity theft protection services offered.
Maine clockDiscovered Apr 29, 2024 → Filed with AG Jun 7, 202439d ⏱ ME AG >30d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_a64efe50e2c9ef64Vermont State AGfiled 2024-06-07Verified
- bd_d3b0c16f87f21f98New Hampshire State AGfiled 2024-06-07Candidate
- bd_7ee7197b9d6514aeMaine State AGfiled 2024-05-15(23d gap)Candidate
- bd_c141f40979a4d5f5New Hampshire State AGfiled 2024-05-15(23d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2c060023-6053-4d4c-be77-954563580084.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2024
- Raw hash
- fa85b0fc92c7ea906058958007f3f52a6aeef2446ce1e52e1a120c3707f8f6d6
Reporting entity
- Name
- Concord Public Schools and Concord-Carlisle Regional School Districtnorm: concord public schools and concord carlisle regional school district
- Domain
- concordps.org
- Industry
- Education
Victim entity
- Name
- Concord Public Schools and Concord-Carlisle Regional School Districtnorm: concord public schools and concord carlisle regional school district
- Domain
- concordps.org
- Industry
- Education
Incident
- Discovered
- Apr 29, 2024
- Materiality determined
- —
- Notification sent
- Jun 7, 2024
- Affected individuals
- 1,485
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 29, 2024→ Filed with AG: Jun 7, 202439d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.