HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Shaker Heights City School District
bd_5dc29817de7b59c8 · schema v1 · pii pii-v1
Full breach record for Shaker Heights City School District →Shaker Heights City School District notified the New Hampshire Attorney General on May 18, 2022, of a cybersecurity incident affecting approximately 3 New Hampshire residents. Unauthorized access occurred between September 1, 2021, and January 30, 2022. The district discovered the breach on January 30, 2022. Personal information accessed included names and Social Security Numbers. The district engaged outside privacy professionals, notified law enforcement, and is offering 12 months of credit monitoring to affected residents.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4bfb3f50b20c4633Montana State AGfiled 2022-05-13(5d gap)Candidate
- bd_efddece3184e1b57Maine State AGfiled 2022-05-13(5d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/shaker-heights-20220518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2022
- Raw hash
- 3c3d226d15e6b2548c1a03f3df061e2b1a149334c01b376ad800b592c9fa2f16
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- Shaker Heights City School Districtnorm: shaker heights city school district
- Industry
- education
Incident
- Discovered
- Jan 30, 2022
- Materiality determined
- —
- Notification sent
- May 13, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Office of the Attorney General (New Hampshire)
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.