AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Darlington County School District
bd_6f365961b92f36db · schema v1 · pii pii-v1
Full breach record for Darlington County School District →Darlington County School District (DCSD) notified the New Hampshire Attorney General of a data event on May 6, 2026. On April 11, 2026, DCSD discovered that a file containing 2025 Form W-2s for employees was inadvertently sent to an unauthorized external recipient in response to a phishing communication. The incident affected one New Hampshire resident, exposing names and Social Security numbers. DCSD notified law enforcement and the IRS, conducted an internal review, and provided one year of complimentary credit monitoring through CyberScout.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_600d0f8d8225bde9Indiana State AGfiled 2026-05-06Verified
- bd_81630a45206a32a0South Carolina State AGfiled 2026-05-07(1d gap)Verified
- bd_79440e54f1985039Massachusetts State AGfiled 2026-05-01(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/darlington-county-school-district-20260506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2026
- Raw hash
- 055ca6982ba7b21d8bf8769ffa015763c0b924d93d7c9ff495cfd0b7dbc8ae1d
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Darlington County School Districtnorm: darlington county school district
- Domain
- dcsdschools.org
- Industry
- education
Incident
- Discovered
- Apr 11, 2026
- Materiality determined
- —
- Notification sent
- May 6, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice to the New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- phishing_link
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.