HackingEducationEducationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)LowContained

Relay Graduate School of Education

bd_5378ee106cc16cc3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 22, 2024

Filed

Nov 13, 2025

To disclose

—

Affected

487state residents only

Linked

8 filings

Confidence

67%

Full breach record for Relay Graduate School of Education →

Relay Graduate School of Education discovered on November 22, 2024, that a threat actor gained unauthorized access to AWS-hosted applications and deleted files. The actor may have accessed student records containing names, contact info, and dates of birth for 487 Maryland residents. SSNs were encrypted and not accessed. Access was contained within hours. Free credit monitoring is offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 22, 2024

Discovered

Nov 13, 2025

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_2d96bd287bb1138b2025-01-14 · +303dVerified
Maine State AGbd_805f3fd11c66444b2025-01-14 · +303dVerified
Montana State AGbd_b1224ac7d58ce76e2025-01-13 · +304dVerified
Indiana State AGbd_7b1f9e1d3df6495b2025-01-10 · +307dVerified

Show 3 more filings ↓up to 316d gap

Nebraska State AGbd_9d870e623a9ae5842025-01-10 · +307dVerified
Vermont State AGbd_c80b5331fb75dd342025-01-10 · +307dVerified
Illinois State AGbd_282b1c76db111cf72025-01-01 · +316dCandidate

Name: Relay Graduate School of Education
norm: relay graduate school of education

Name: Relay Graduate School of Education
norm: relay graduate school of education
Industry: Educationllm

Discovered: Nov 22, 2024
Materiality determined: —
Notification sent: Jan 10, 2025
Affected individuals: 487state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1485 Data Destruction
Threat actor: External
Regulator citations: Notified Maryland Office of the Attorney General

During the incident: Severed the threat actor’s access to the environment
Reset IT passwords
Hardened its network
Engaged cybersecurity counsel
Engaged a forensics firm
Reported this incident to federal law enforcement
Changes made: Providing free credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+13d

Maine State AG+13d

Maryland State AG+316d · this page

Pattern: first filing Jan 1 (IL), last Nov 13 (MD) — a 316-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376180.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 8d319f921a028e23dd51a55e20f1692e1fd2032a5ffcb63571b68e1676047664

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityRelay Graduate School of Education

Victim entityRelay Graduate School of Education

Incidentdiscovered Nov 22, 2024

Stated responseSevered the threat actor’s access to the environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov