HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Southern Oregon Educational Services District
bd_343751bd0a344999 · schema v1 · pii pii-v1
Full breach record for Southern Oregon Educational Services District →Southern Oregon Education Service District notified the NH AG of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access to personal information occurred on or about Dec 21, 2024. The district was notified on Jan 13, 2025, and is offering credit monitoring to affected employees.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_711ad2522fffcfd7Maine State AGfiled 2025-03-01(2d gap)Candidate
- bd_f804b3c57bf4a7a7Oregon State AGfiled 2025-03-01(2d gap)Verified
- bd_015a2cdf30ffa15cIndiana State AGfiled 2025-02-28(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/southern-oregon-education-service-district-carruth-compliance-consulting-20250303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2025
- Raw hash
- 72dfa6a624cea5362f8ad042726eb9edf05853404842a97cd65b573b646d3504
Reporting entity
- Name
- Southern Oregon Educational Services Districtnorm: southern oregon educational services district
- Domain
- soesd.k12.or.us
Victim entity
- Name
- Southern Oregon Educational Services Districtnorm: southern oregon educational services district
- Domain
- soesd.k12.or.us
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.