HackingEducationEducationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)Government IDMediumActive

Marathon County Special Education

bd_618609cb8a546c4e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 20, 2023

Filed

May 31, 2024

To disclose

32 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Marathon County Special Education →3 incidents on file

Marathon County Special Education (MCSE) notified individuals of a data security incident detected on October 20, 2023, involving unauthorized access to its Skyward payroll system and email environment. The incident may have exposed personal information of current and former employees. MCSE engaged forensic investigators and is offering complimentary credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 224 days

Oct 20, 2023

Discovered

May 31, 2024

Filed

vs. sector median

+23 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Marathon County Special Education
norm: marathon county special education

Name: Marathon County Special Education
norm: marathon county special education
Industry: Educationllm

Discovered: Oct 20, 2023
Materiality determined: —
Notification sent: May 30, 2024
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to secure its environment and investigate the nature and scope of the unauthorized activity
Engaged a third-party data mining company to conduct a review of the impacted data
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Taking steps to strengthen its security posture to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(224 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1441.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2024
Raw hash: eb9368e643376c5e6ce87b755f84619b9f41b234bd42d826839eb85dad1bea6b

Reporting entityMarathon County Special Education

Victim entityMarathon County Special Education

Incidentdiscovered Oct 20, 2023

Stated responseEngaged a specialized cybersecurity firm to secure its environment and investigate the nature and scope of the unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov