HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Manhasset Union Free School District
bd_76987bc7ef98df23 · schema v1 · pii pii-v1
Full breach record for Manhasset Union Free School District →Manhasset Union Free School District experienced an external system breach (hacking) between September 10 and 14, 2021, discovered on February 17, 2022. The incident affected 5,709 individuals, including 3 Maine residents. Personal information compromised included names and Social Security Numbers. The District provided written notification and offered one year of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Feb 17, 2022 → Filed with AG Apr 20, 202262d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by vicesociety about this victim predates this filing by 104 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9a250a49d1921746Leak Sitevicesocietyfiled 2022-01-06(104d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/22a335b8-6e1c-459e-8070-489681703282.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 20, 2022
- Raw hash
- fea328678839ff02997af05868473d36c6ac32e09294a46691d7e9b3aa8cb65c
Reporting entity
- Name
- Manhasset Union Free School Districtnorm: manhasset union free school district
Victim entity
- Name
- Manhasset Union Free School Districtnorm: manhasset union free school district
Incident
- Discovered
- Feb 17, 2022
- Materiality determined
- —
- Notification sent
- Apr 20, 2022
- Affected individuals
- 5,709
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- ME AG >30d · 62dME resident >60d · 62dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 17, 2022→ Filed with AG: Apr 20, 202262d 30 days (soft) ME AG >30d Maine Discovered: Feb 17, 2022→ Notified: Apr 20, 202262d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.