HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
York County School of Technology
bd_343cc6ae8c6825d6 · schema v1 · pii pii-v1
Full breach record for York County School of Technology →York County School of Technology experienced a cybersecurity incident in March 2023 involving unauthorized access to personal information, including full names and Social Security numbers. The school engaged forensic investigators and offered 12 months of credit monitoring to affected individuals. The incident was disclosed in April 2024.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by karakurt about this victim predates this filing by 326 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6b8745b466949cb4Leak Sitekarakurtfiled 2023-05-15(326d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_0bf6ba22e1b9adfbIndiana State AGfiled 2024-04-05Verified
- bd_48ac0ef03c6dae91Maine State AGfiled 2024-04-04(1d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-05-york-county-school-technology-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 5, 2024
- Raw hash
- 652fae30f51329117e08f1197253b9a6c067ab9a728b0d1e18f4db780292a544
Reporting entity
- Name
- York County School of Technologynorm: york county school of
Victim entity
- Name
- York County School of Technologynorm: york county school of
Incident
- Discovered
- Mar 27, 2023
- Materiality determined
- Apr 5, 2024
- Notification sent
- Apr 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 13 months(375 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.