HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Newberg School District
bd_765835b02eadc11c · schema v1 · pii pii-v1
Full breach record for Newberg School District →Newberg School District experienced a data breach on June 12, 2024, where an unknown actor accessed personal information including names and government IDs. The district engaged forensic investigators, notified the FBI, and offered credit monitoring to affected individuals. Notification was sent in January 2025.
Vermont clock✗ VT AG >45 bday30 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-07-newberg-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2025
- Raw hash
- 314820a444d063141acf815ea03918eec3462eb040c58b254e8061a442a7b52b
Reporting entity
- Name
- Newberg School Districtnorm: newberg school district
- Domain
- newberg.k12.or.us
Victim entity
- Name
- Newberg School Districtnorm: newberg school district
- Domain
- newberg.k12.or.us
Incident
- Discovered
- Jun 12, 2024
- Materiality determined
- —
- Notification sent
- Jan 6, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the incident to the FBI
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 30 weeks(209 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.