HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Traverse City Area Public Schools
bd_39dec15e884b64ac · schema v1 · pii pii-v1
Full breach record for Traverse City Area Public Schools →Traverse City Area Public Schools notified consumers of a March 2024 data breach where an unauthorized party accessed electronic files containing personal information. Forensic investigation confirmed potential exposure of identity data. The district offered 12 months of credit monitoring and identity restoration services to affected individuals.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 480 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a47a7d5ca4d3e6d7Indiana State AGfiled 2025-07-24Verified
- bd_403a303cc8ab92bcNew Hampshire State AGfiled 2025-07-28(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-24-traverse-city-area-public-schools-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2025
- Raw hash
- cdb515319f7c37d8972bc67fd0843b8e3b0f62bb9e4e548ed8f9e48e39c9fb1a
Reporting entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
Victim entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
Incident
- Discovered
- Mar 19, 2024
- Materiality determined
- Jul 24, 2025
- Notification sent
- Jul 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(492 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.