HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Lexington County School District One
bd_385c1ad29489c5a9 · schema v1 · pii pii-v1
Full breach record for Lexington County School District One →Lexington County School District One (South Carolina) notified parents and staff of a data breach involving the PowerSchool platform. A 14-year-old student allegedly hacked into the system, accessing staff emails and student/employee data including names, addresses, and Social Security Numbers. The district forced password resets and advised affected parties to place security freezes on credit reports while law enforcement investigated.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/LexingtonSchoolDistrictOne.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2018
- Raw hash
- 373640b5e9d1d554a5fd95c30c66b8d11941c4329d19e7bb4562bcef24d4e9f3
Reporting entity
- Name
- Lexington County School District Onenorm: lexington county school district one
- Domain
- lexington1.net
Victim entity
- Name
- Lexington County School District Onenorm: lexington county school district one
- Domain
- lexington1.net
Incident
- Discovered
- May 14, 2018
- Materiality determined
- —
- Notification sent
- May 21, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Work with law enforcement (Lexington County Sheriff’s Department’s Computer Crimes Task Force)
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.