MisusePrivilege AbuseData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Litchfield School District

bd_6af082c59fdbe0ff · schema v1 · pii pii-v1

Full breach record for Litchfield School District →

Litchfield School District (NH) notified the NH Attorney General of a data security incident discovered on December 6, 2021. An individual with authorized access to student records shared special education documents to a personal email account between September 14 and December 8, 2021. Approximately 630 students were affected, with 198 receiving direct notification. Data included names, DOBs, addresses, and SASIDs; no SSNs or financial data were implicated. The District terminated access, restored privacy settings, and conducted forensic analysis.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed630 affectedView incident

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/litchfield-school-district-20220119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2022
Raw hash: 652d98e480cbcfe3c250e8772a8a670f64d4821b7b3b8d7f6be5869fc7335733

Reporting entity

Name: Litchfield School District
norm: litchfield school district

Victim entity

Name: Litchfield School District
norm: litchfield school district

Incident

Discovered: Dec 6, 2021
Materiality determined: —
Notification sent: Dec 28, 2021
Affected individuals: 630
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: insider_action

Compliance

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.