MalwareEducationEducationRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedPIILowActive

American Falls School District #381

bd_53fc9de5e5174c61 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 31, 2025

Filed

Apr 29, 2025

To disclose

29 days

Affected

Not disclosed

Confidence

66%

Full breach record for American Falls School District #381 →2 incidents on file

American Falls School District #381 notified the Idaho Attorney General on April 29, 2025, of a ransomware incident confirmed on March 31, 2025. The District engaged legal counsel and a digital forensics firm to investigate and contain the breach. Federal law enforcement was notified. The scope of personal information acquired is under investigation, but the District plans to notify affected individuals and offer credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Mar 31, 2025

Discovered

Apr 29, 2025

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: ECKERT SEAMANS CHERIN & MELLOTT, LLC
norm: eckert seamans cherin mellott

Name: American Falls School District #381
norm: american falls school district 381
Industry: Educationllm

Discovered: Mar 31, 2025
Materiality determined: —
Notification sent: Apr 29, 2025
Affected individuals: Not disclosed
Data types: PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Idaho Attorney General Consumer Protection Division

During the incident: Began working with legal counsel and a nationally recognized cyber security and digital forensics firm, to contain the incident, securely restore operations, investigate the scope of the incident, and mitigate any resulting harm
Notified federal law enforcement regarding this incident and is cooperating with the investigation
Changes made: Providing written notice to affected individuals, together with an offer of complimentary credit monitoring where appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/04/UTF-8AFSD-ID-AG-Notice120780899.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2025
Raw hash: 501a9d4a2d6af6c95976c251f9bcb201ab9794edbe62b22c008363fd691f03c6

Reporting entityECKERT SEAMANS CHERIN & MELLOTT, LLC

Victim entityAmerican Falls School District #381

Incidentdiscovered Mar 31, 2025

Stated responseBegan working with legal counsel and a nationally recognized cyber security and digital forensics firm, to contain the incident, securely restore operations, investigate the scope of the incident, and mitigate any resulting harm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov