HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Altoona Area School District
bd_5b60cec9d1420131 · schema v1 · pii pii-v1
Full breach record for Altoona Area School District →Altoona Area School District notified the New Hampshire Attorney General of a data security incident detected on December 2, 2021. Unauthorized access to systems containing personal information of 3 New Hampshire residents was confirmed on March 14, 2022. Affected data included names, dates of birth, and Social Security numbers. The District engaged forensic experts, reported to the FBI, and provided complimentary identity protection services to affected individuals.
Leak gap clock⏱ Leak >30d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by quantum about this victim predates this filing by 57 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_bd1149f74ae8c654Leak Sitequantumfiled 2022-02-02(57d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_858c41f9adf245d9Montana State AGfiled 2022-04-01Verified by operator
- bd_15dc64bd8c8fa6e6HHS OCRfiled 2022-04-11(10d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/altoona-area-school-20220401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2022
- Raw hash
- a027b653e956f352770593b94312c3f3561f8a947b9c1bc80b7339ae5ceeafa1
Reporting entity
- Name
- Altoona Area School Districtnorm: altoona area school district
Victim entity
- Name
- Altoona Area School Districtnorm: altoona area school district
Incident
- Discovered
- Dec 2, 2021
- Materiality determined
- —
- Notification sent
- Apr 1, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.