HackingEducationEducationSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PIIMediumContained

Moscow School District No. 281

bd_3d2d284aac883ca0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2025

Filed

Jan 9, 2025

To disclose

≤1 day

Affected

Not disclosed

Confidence

67%

Full breach record for Moscow School District No. 281 →

Moscow School District #281 notified the Idaho AG on Jan 9, 2025, of a breach discovered Jan 8, 2025, involving its third-party platform provider PowerSchool. Stolen data included student demographics, state IDs, contact info, medical plans/allergies, and 5 staff SSNs. The breach source is secured and data deleted.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 1 days

Jan 8, 2025

Discovered

Jan 9, 2025

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Moscow School District No. 281
norm: moscow school district no 281
Domain: msd281.org

Name: Moscow School District No. 281
norm: moscow school district no 281
Domain: msd281.org
Industry: Educationllm

Discovered: Jan 8, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Idaho Attorney GeneralWill report to State Board of Education Executive DirectorWill report to Superintendent of Public Instruction
Third party: via PowerSchool
Initial access: supply_chain

During the incident: Reported data breach to insurance company
Will report breach to State Board of Education Executive Director
Will report breach to Superintendent of Public Instruction
Changes made: Source of data breach secured by PowerSchool
Accessed data deleted with reasonable assurances
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/01/1-9-2025-Moscow-School-District-No.-281.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2025
Raw hash: f4add8f8336dad2983e99ae54081ce00895ef9c3c47db23f03d79de3c4bacf14

Reporting entityMoscow School District No. 281

Victim entityMoscow School District No. 281

Incidentdiscovered Jan 8, 2025

Stated responseReported data breach to insurance company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov