MalwareEducationEducationRansomwareData ExfiltratedDelayed DiscoveryAuthenticationBiometricEducationFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

The Ellensburg School District

bd_67f5c5edad3d4a23 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 19, 2023

Filed

Aug 21, 2024

To disclose

13 months

Affected

3,955state residents only

Linked

4 filings

Confidence

69%

Full breach record for The Ellensburg School District →

The Ellensburg School District experienced a ransomware attack between July 18-19, 2023. The incident was discovered on July 19, 2023. Approximately 3,955 Washington residents were affected. The breach involved unauthorized access to limited network information, including names and other data elements. The District engaged third-party specialists for investigation and remediation, implemented additional technical safeguards, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d13 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 13 months / 399 days

Jul 18, 2023

Begins

Jul 19, 2023

Discovered

Aug 21, 2024

Filed

vs. sector median

+50 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_6291c6fee235134c2024-08-21Verified
Montana State AGbd_723c05b0ae3eb2b62024-08-21Verified
Maine State AGbd_de5b097bf5d645872024-08-21Verified

Name: The Ellensburg School District
norm: the ellensburg school district

Name: The Ellensburg School District
norm: the ellensburg school district
Industry: Educationllm

Discovered: Jul 19, 2023
Breach occurred: Jul 18, 2023 – Jul 19, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 15, 2024
Affected individuals: 3,955state-resident count only
Data types: Identity (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthStudent ID numberHealth insurance IDMedical informationBiometric dataUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Engaged a third-party vendor to conduct a thorough review of the contents of the data
Secured our environment
Undertook a thorough investigation
Offering complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(399 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 21 · first

Montana State AGAug 21 · first

Maine State AGAug 21 · first

Washington State AGAug 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA30284.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2024
Raw hash: a709e5c3e428c39d0f078c2c21b945df9699699152945fff14beb1b258f7a6f6

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe Ellensburg School District

Victim entityThe Ellensburg School District

Incidentdiscovered Jul 19, 2023

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com