MalwareRetail & ConsumerRetailRansomwareData EncryptedCustomer Data InvolvedPIIIdentity (basic)Financial accountFinancial credentialsLowContained

ProSchools

bd_710adcf936b488ce · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 22, 2016

To disclose

—

Affected

25state residents only

Linked

3 filings

Confidence

66%

Full breach record for ProSchools →

ProSchools notified Montana residents of a malware attack on its e-commerce system between Feb 4 and Mar 16, 2016. Customer PII and credit card data (including CVV) may have been compromised. ProSchools engaged Sikich for forensic review and Core ID Services for identity protection. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 4, 2016

Begins

Apr 22, 2016

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_bc5790eb56074d6b2016-04-28 · +6dVerified
Oregon State AGbd_73078430ee45a7782016-05-02 · +10dVerified

Name: ProSchools
norm: proschools

Name: ProSchools
norm: proschools
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Feb 4, 2016 – Mar 16, 2016
Materiality determined: —
Notification sent: Apr 15, 2016
Affected individuals: 25state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial

During the incident: Began work with e-commerce provider and website hosting provider to block the attack
Implemented additional security measures
Reviewed details of the malicious attack
Performed remediation steps reviewed by Sikich
Retained services of Core ID Services for Identity Theft Protection
Changes made: Implemented additional security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGApr 22 · first · this page

Massachusetts State AG+6d

Oregon State AG+10d

Pattern: first filing Apr 22 (MT), last May 2 (OR) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/ProSchools.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2016
Raw hash: 7d1a22355ef9eb02843ba5f36684b0e166b8dd4f863af34ef6a56fbf5440158c

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityProSchools

Victim entityProSchools

IncidentRansomware

Stated responseBegan work with e-commerce provider and website hosting provider to block the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov