HackingEducationEducationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
Traverse City Area Public Schools
bd_650cc53ee19c6ca0 · schema v1 · pii pii-v1
Full breach record for Traverse City Area Public Schools →On or about March 19, 2024, an unauthorized party acquired a limited number of electronic files from Traverse City Area Public Schools computer systems. The breach was discovered on or about May 20, 2025, following forensic investigation. A total of 10,595 individuals were affected, including 7 Maine residents. The school district offered 12 months of Experian IdentityWorks Credit 3B identity protection services to affected individuals.
Leak gap clock✗ Leak >180d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 480 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_f799947037f25d6aLeak Sitemedusafiled 2024-04-13(466d gap)Verified
- bd_3327a5e2353e941bLeak Sitemedusafiled 2024-03-31(480d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/85b25859-32ca-42a9-9d7b-439e49749cca.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2025
- Raw hash
- 65299a72dfe1c8f9902b7cb387ca9d8729995bf6557145bd300ad3624c1e9104
Reporting entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
- Industry
- Education
Victim entity
- Name
- Traverse City Area Public Schoolsnorm: traverse city area public schools
- Domain
- tcaps.net
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Jul 24, 2025
- Affected individuals
- 7
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 65dME resident >60d · 65d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 20, 2025→ Filed with AG: Jul 24, 202565d 30 days (soft) ME AG >30d Maine Discovered: May 20, 2025→ Notified: Jul 24, 202565d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.