HackingEducationGovernment IDIdentity (basic)MediumContained

Bozeman School District 7

bd_7436bd4010878474 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 26, 2026

Filed

Jun 3, 2026

To disclose

10 weeks

Affected

2state residents only

Linked

6 filings

Confidence

66%

Full breach record for Bozeman School District 7 →

Bozeman School District #7 notified the New Hampshire Attorney General of a cybersecurity incident occurring between Feb 19 and Mar 27, 2026. Unauthorized access affected approximately 2 NH residents, exposing names and Social Security numbers. BSD#7 engaged forensic specialists, sent notices, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 35 days

discovery → filing · 10 weeks / 69 days

Feb 19, 2026

Begins

Mar 26, 2026

Discovered

Jun 3, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_4ccd7ee71fdf42da2026-06-03Verified
Massachusetts State AGbd_4e0cc705b6897fdd2026-06-03Candidate
Vermont State AGbd_7af98d238672fb8a2026-06-03Verified
Nebraska State AGbd_253765aaf81d5c9b2026-06-02 · +1dVerified

Show 1 more filing ↓up to 1d gap

Indiana State AGbd_a98867454db3e3ac2026-06-02 · +1dVerified

Name: Cipriani
norm: cipriani
Domain: cipriani.com

Name: Bozeman School District 7
norm: bozeman school district 7
Domain: bsd7.org
Industry: education

Discovered: Mar 26, 2026
Breach occurred: Feb 19, 2026 – Mar 27, 2026
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 2, 2026
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Engaged third-party computer forensic specialists to conduct an investigation
Began a review of the potentially impacted data
Sent written notice of this incident to the potentially impacted New Hampshire residents
Offered complimentary credit monitoring and identity theft protection services for twelve (12) months
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGJun 2 · first

Indiana State AGJun 2 · first

Maine State AG+1d

Massachusetts State AG+1d

Vermont State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bozeman-school-district-7-20260603.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 3, 2026
Raw hash: b3812c6e4c757263af37d743568ff86bba43369a821a985c4a90a9240d947c6e

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCipriani

Victim entityBozeman School District 7

Incidentdiscovered Mar 26, 2026

Stated responseEngaged third-party computer forensic specialists to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov