HackingSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Tillamook School District 9
bd_4fd6df2925fa05ca · schema v1 · pii pii-v1
Full breach record for Tillamook School District 9 →Tillamook School District 9 notified the NH AG of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access to personal information occurred on or about Dec 21, 2024. One NH resident was affected. Notification letters were sent on March 13, 2025, offering credit monitoring and identity theft protection.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6e30edc499e8fe87Oregon State AGfiled 2025-03-13Candidate
- bd_b1bb71011648a87aIndiana State AGfiled 2025-03-13Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/tillamook-school-district-9-carruth-compliance-consulting-20250313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2025
- Raw hash
- 71085b4243e15b563d9e94835c6102a2624703a0bbe59fcc1b1d1f4a5e01e095
Reporting entity
- Name
- Tillamook School District 9norm: tillamook school district 9
Victim entity
- Name
- Tillamook School District 9norm: tillamook school district 9
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Mar 13, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of InvestigationFiled notification with New Hampshire Attorney General Consumer Protection Bureau
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.