AccidentalEducationEducationMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Darlington County School District

bd_6f365961b92f36db · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2026

Filed

May 6, 2026

To disclose

25 days

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Darlington County School District →

Darlington County School District inadvertently sent a file containing 2025 Form W-2s for employees to an unauthorized external recipient on April 11, 2026, in response to a communication that appeared to be a legitimate internal request. The incident potentially exposed names and Social Security numbers of one New Hampshire resident. The District notified law enforcement and the IRS, conducted an internal review, and is offering one year of credit monitoring through CyberScout.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 days

Apr 11, 2026

Discovered

May 6, 2026

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_600d0f8d8225bde92026-05-06Verified
Massachusetts State AGbd_79440e54f19850392026-05-06Candidate
South Carolina State AGbd_81630a45206a32a02026-05-07 · +1dVerified

Name: Darlington County School District
norm: darlington county school district

Name: Darlington County School District
norm: darlington county school district
Domain: dcsdschools.org
Industry: Educationllm

Discovered: Apr 11, 2026
Materiality determined: —
Notification sent: May 6, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
Regulator citations: Notified the Internal Revenue ServiceProviding written notice of this incident to relevant state regulators, as necessary

During the incident: Conducted an internal review
Notified law enforcement
Notified the Internal Revenue Service
Implemented additional safeguards to help prevent similar incidents in the future
Changes made: Implementing additional safeguards and training to its employees
Providing access to credit monitoring services for one (1) year, through CyberScout, a TransUnion company
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing information on protecting against tax fraud
Providing contact details for the national consumer reporting agencies
Providing information on how to obtain a free credit report
Providing a reminder to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports
Providing encouragement to contact the Federal Trade Commission, their state Attorney General, and law enforcement to report attempted or actual identity theft and fraud
Reviewing existing security policies
Reinforced with our staff the importance of safeguarding information in our possession to protect against similar events moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 6 · first

Massachusetts State AGMay 6 · first

New Hampshire State AGMay 6 · first · this page

South Carolina State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/darlington-county-school-district-20260506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2026
Raw hash: 055ca6982ba7b21d8bf8769ffa015763c0b924d93d7c9ff495cfd0b7dbc8ae1d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDarlington County School District

Victim entityDarlington County School District

Incidentdiscovered Apr 11, 2026

Stated responseConducted an internal review

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov