MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTMediumActive
Shelley School District
bd_3165929c1e2763c1 · schema v1 · pii pii-v1
Full breach record for Shelley School District →Shelley School District (Idaho) notified the Idaho Attorney General on Feb 23, 2022, of a ransomware attack impacting systems starting Dec 6, 2021. The investigation revealed potential unauthorized access to Idaho residents' Social Security numbers. The District engaged forensic investigators, deployed SentinelOne, and migrated authentication to the cloud. Data was exfiltrated; the scope of affected individuals is still being determined.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d530cffe515bbf52Idaho State AGfiled 2022-03-23(28d gap)Verified
- bd_6d83b2b9c1f5dbf4Montana State AGfiled 2022-03-24(29d gap)Verified
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/03/02-23-2022-Shelley-School-District.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2022
- Raw hash
- 5b73e642da3d139bca156959c9e691870fb2a3e71bfda9cd9994954ae302e4b0
Reporting entity
- Name
- Shelley School Districtnorm: shelley school district
Victim entity
- Name
- Shelley School Districtnorm: shelley school district
Incident
- Discovered
- Dec 6, 2021
- Materiality determined
- Feb 23, 2022
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notified the Idaho Chief Information Security Officer (CISO)notified the Federal Bureau of Investigation (FBI)notified the Idaho Superintendent of Public Instructionnotified the Idaho State Department of Education Executive Director
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.