HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Nashua School District
bd_3f5dc0cdfa58cbf2 · schema v1 · pii pii-v1
Full breach record for Nashua School District →City of Nashua School District reported an external system breach (hacking) occurring between March 30, 2023, and April 28, 2024. Discovered on December 20, 2023, the incident compromised names and financial account/credit card numbers for 9,829 individuals, including 93 Maine residents. Written notification was sent on February 28, 2024.
Leak gap clock✗ Leak >180d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9,829 affectedView incident
A leak claim by blacksuit about this victim predates this filing by 285 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cacf753a-42a6-4d1b-98a2-a85f0e1b68e6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2024
- Raw hash
- 3beeb4ffdd105f0189453430a67baec1f6049969f3883e2491a9555ac62b3ffe
Reporting entity
- Name
- Nashua School Districtnorm: nashua school district
- Domain
- nashua.edu
Victim entity
- Name
- Nashua School Districtnorm: nashua school district
- Domain
- nashua.edu
Incident
- Discovered
- Dec 20, 2023
- Materiality determined
- Feb 28, 2024
- Notification sent
- Feb 28, 2024
- Affected individuals
- 9,829
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 20, 2023→ Filed with AG: Feb 28, 202470d 30 days (soft) ME AG >30d Maine Discovered: Dec 20, 2023→ Notified: Feb 28, 202470d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.