HackingEducationEducationStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)HighContained

Lexington County School District One

bd_385c1ad29489c5a9 · schema v1 · pii pii-v1

Severity

High

Discovered

May 14, 2018

Filed

May 22, 2018

To disclose

8 days

Affected

5,949state residents only

Confidence

65%

Full breach record for Lexington County School District One →

Lexington County School District One (South Carolina) notified parents and staff of a data breach involving the PowerSchool platform. A 14-year-old student allegedly hacked into the system, accessing staff emails and student/employee data including names, addresses, and Social Security Numbers. The district forced password resets and advised affected parties to place security freezes on credit reports while law enforcement investigated.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due8 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 8 days

May 11, 2018

Begins

May 14, 2018

Discovered

May 22, 2018

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,949 affectedView incident

Name: Lexington County School District One
norm: lexington county school district one
Domain: lexington1.net

Name: Lexington County School District One
norm: lexington county school district one
Domain: lexington1.net
Industry: Educationllm

Discovered: May 14, 2018
Breach occurred: May 11, 2018 – May 14, 2018
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 21, 2018
Affected individuals: 5,949state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Work with law enforcement (Lexington County Sheriff’s Department’s Computer Crimes Task Force)
Initial access: valid_credentials

During the incident: Force you to reset your district password the next time you sign in
Work with law enforcement (Lexington County Sheriff’s Department’s Computer Crimes Task Force)
Suggest placing a security freeze on credit reports
Changes made: Catching this breach early and addressing this issue proactively and quickly
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/LexingtonSchoolDistrictOne.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2018
Raw hash: 373640b5e9d1d554a5fd95c30c66b8d11941c4329d19e7bb4562bcef24d4e9f3

Reporting entityLexington County School District One

Victim entityLexington County School District One

Incidentdiscovered May 14, 2018

Stated responseForce you to reset your district password the next time you sign in

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov