MalwareEducationEducationRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedAuthenticationEducationHealth (basic)Identity (basic)Government IDPHIPIIMediumActive

Prosser School District

bd_64b56abbbe9b1ce3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 3, 2024

Filed

Mar 21, 2025

To disclose

37 weeks

Affected

963state residents only

Confidence

71%

Full breach record for Prosser School District →

Prosser School District (WA) reported a ransomware incident where an unknown actor accessed systems between June 29 and July 3, 2024, encrypting files and exfiltrating data. Discovered July 3, 2024. Data included names, SSNs, DOBs, and medical info. 963 Washington residents notified on March 21, 2025. Law enforcement notified; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d37 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 4 days

discovery → filing · 37 weeks / 261 days

Jun 29, 2024

Begins

Jul 3, 2024

Discovered

Mar 21, 2025

Filed

vs. sector median

+29 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed963 affectedView incident

Name: Prosser School District
norm: prosser school district

Name: Prosser School District
norm: prosser school district
Industry: Educationllm

Discovered: Jul 3, 2024
Breach occurred: Jun 29, 2024 – Jul 3, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 21, 2025
Affected individuals: 963state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: NameSocial Security numberDate of birthStudent ID numberHealth insurance IDMedical informationUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Providing written notice of this event to relevant state regulators, as necessary

During the incident: Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twelve (12) months, through Experian, to individuals whose Social Security information was potentially affected by this event, at no cost to the individual
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place fraud alerts and credit freezes on their credit files
Providing written notice of this event to relevant state regulators, as necessary
Changes made: Working to implement additional safeguards and training to its employees
Reviewed our policies, procedures, and security tools to reduce the risk of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(261 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32773.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 21, 2025
Raw hash: cd3d5f08358092a7cf1fa4ac33e1ea243a52c347abfa3653907ddc3c1972aa2a

Reporting entityProsser School District

Victim entityProsser School District

Incidentdiscovered Jul 3, 2024

Stated responseNotified federal law enforcement regarding the event

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com