MalwareEducationEducationRansomwareData ExfiltratedTargetedAuthenticationCredentialsEducationFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Renton School District

bd_78fb391f69e59c82 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 3, 2023

Filed

Feb 29, 2024

To disclose

30 weeks

Affected

18,891state residents only

Linked

9 records

Confidence

71%

Full breach record for Renton School District →2 incidents on file

Renton School District notified Washington residents of a ransomware cyberattack occurring between July 13 and August 3, 2023. The incident compromised names, SSNs, DOBs, health insurance, medical info, financial accounts, and credentials. Approximately 18,891 Washington residents were affected. Notices were sent on February 29, 2024, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d30 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 21 days

discovery → filing · 30 weeks / 210 days

Jul 13, 2023

Begins

Aug 3, 2023

Discovered

Feb 29, 2024

Filed

This filing is one of 9 records about the same incident.View merged incident

A leak claim by akira about this victim was first seen 183 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_4c3e555ffdbbe0882023-08-03 · +210dVerified by operator

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_3dc967a20706b2802024-02-29Verified
Vermont State AGbd_4a015670a87505802024-02-29Verified by operator
Massachusetts State AGbd_67d850e96fdf36292024-02-29Verified by operator
New Hampshire State AGbd_8625f3273e1558d32024-02-29Verified by operator

Show 2 more filings ↓

Montana State AGbd_8eef5f43cd07775c2024-02-29Verified by operator
Indiana State AGbd_bc58b5c216b3926e2024-02-29Verified by operator

Press reports (1)

Pressakirabd_48812d4053141d932023-08-03 · +210dCandidate

Name: Renton School District
norm: renton school district
Domain: rentonschools.us

Name: Renton School District
norm: renton school district
Domain: rentonschools.us
Industry: Educationllm

Discovered: Aug 3, 2023
Breach occurred: Jul 13, 2023 – Aug 3, 2023
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 29, 2024
Affected individuals: 18,891state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)CredentialsAuthentication
Data elements: NameSocial Security numberFinancial account numberDate of birthStudent ID numberHealth insurance IDMedical informationUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementProvided written notice to relevant state regulatorsProvided notice to the three major credit reporting agencies
Initial access: exploit_public_facing

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of Renton systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Provided access to credit monitoring services for twelve (12) months, through IDX
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of this incident to relevant state regulators
Provided written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Reviewed policies, procedures, and security tools
Updated employee training program
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: WA AG >90dLeak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Maine State AGFeb 29 · first

Vermont State AGFeb 29 · first

Massachusetts State AGFeb 29 · first

New Hampshire State AGFeb 29 · first

Montana State AGFeb 29 · first

Indiana State AGFeb 29 · first

Washington State AGFeb 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA28125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 29, 2024
Raw hash: 00fb34f1f0681389cba6db1f0779b79b84c1af78327f56b7e603f7b29214b1e1

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Press reports (1)

Reporting entityRenton School District

Victim entityRenton School District

Incidentdiscovered Aug 3, 2023

Stated responseMoved quickly to investigate and respond to the incident

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com