HackingEducationEducationStolen CredentialsTargetedPIIIdentity (basic)LowContained

The Ellensburg School District

bd_723c05b0ae3eb2b6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 19, 2023

Filed

Aug 21, 2024

To disclose

13 months

Affected

15state residents only

Linked

4 filings

Confidence

64%

Full breach record for The Ellensburg School District →

The Ellensburg School District notified affected individuals of a data security incident occurring between July 18-19, 2023. An unauthorized actor accessed limited information, including names and other data elements. The District engaged third-party specialists, secured its environment, and offered credit monitoring services. Notification was sent on June 5, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 13 months / 399 days

Jul 18, 2023

Begins

Jul 19, 2023

Discovered

Aug 21, 2024

Filed

vs. sector median

+50 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_6291c6fee235134c2024-08-21Verified
Washington State AGbd_67f5c5edad3d4a232024-08-21Candidate
Maine State AGbd_de5b097bf5d645872024-08-21Verified

Name: The Ellensburg School District
norm: the ellensburg school district

Name: The Ellensburg School District
norm: the ellensburg school district
Industry: Educationllm

Discovered: Jul 19, 2023
Breach occurred: Jul 18, 2023 – Jul 19, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 5, 2024
Affected individuals: 15state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Secured our environment
Undertook a thorough investigation
Implemented additional technical safeguards
Offering complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(399 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 21 · first

Washington State AGAug 21 · first

Maine State AGAug 21 · first

Montana State AGAug 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1609.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2024
Raw hash: c1e06d50fe5fd38273db46e0b10df29095bddef25e85bf1dc0a4911785d24aa3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe Ellensburg School District

Victim entityThe Ellensburg School District

Incidentdiscovered Jul 19, 2023

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov