HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained
Hinsdale School District
bd_6df46b5b87cbe51c · schema v1 · pii pii-v1
Full breach record for Hinsdale School District →Hinsdale School District notified consumers of a data breach involving unauthorized access to personal information. Affected data includes names, addresses, dates of birth, Social Security numbers, financial account numbers, and medical/health insurance information. The District offered 12 months of credit monitoring and established a toll-free response line.
Leak gap clock⏱ Leak >90d≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by medusa about this victim predates this filing by 168 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-28-hinsdale-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2024
- Raw hash
- c27929875b7b2562ee215d6da2f189a2973f9180c1881e9f2956d068a475fd7a
Reporting entity
- Name
- Hinsdale School Districtnorm: hinsdale school district
- Domain
- hinsdale.k12.nh.us
Victim entity
- Name
- Hinsdale School Districtnorm: hinsdale school district
- Domain
- hinsdale.k12.nh.us
Incident
- Discovered
- May 28, 2024
- Materiality determined
- —
- Notification sent
- May 28, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- Leak >90dVT AG ≤14 bday
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.