HackingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Traverse City Area Public Schools
bd_403a303cc8ab92bc · schema v1 · pii pii-v1
Full breach record for Traverse City Area Public Schools →Traverse City Area Public Schools notified the NH AG of an unauthorized access incident occurring on March 19, 2024. The breach affected approximately 3 New Hampshire residents, exposing names and Social Security numbers. TCAPS contained the incident, engaged forensic experts, and offered 12 months of credit monitoring. No evidence of identity theft was found.
Leak gap clock✗ Leak >180d17 months discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 484 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_39dec15e884b64acVermont State AGfiled 2025-07-24(4d gap)Candidate
- bd_a47a7d5ca4d3e6d7Indiana State AGfiled 2025-07-24(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/traverse-city-area-public-schools-20250728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2025
- Raw hash
- 6d0f50833003bf78c4ce989f9a6e70a4a941c103db2d394712aa4e479633bc94
Reporting entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
Victim entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
Incident
- Discovered
- Mar 19, 2024
- Materiality determined
- May 20, 2025
- Notification sent
- Jul 24, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 months(496 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.