HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIMediumContained
Clackamas Education Service District
bd_83e17d2eef4ead27 · schema v1 · pii pii-v1
Full breach record for Clackamas Education Service District →Clackamas Education Service District notified the NH AG of a third-party data breach involving its vendor, Carruth Compliance Consulting. Unauthorized access occurred on or about Dec 21, 2024. Affected data included names, SSNs, financial account info, and potentially driver's license and tax data. 1 NH resident affected. Clackamas ESD offered credit monitoring services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2f805b1238266eb7Montana State AGfiled 2025-03-03Candidate
- bd_93b1a495f62e053bOregon State AGfiled 2025-03-04(1d gap)Verified
- bd_cacc5dd527d6961aVermont State AGfiled 2025-03-05(2d gap)Verified
- bd_3e3f917819656e91Indiana State AGfiled 2025-02-28(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/clackamas-education-service-district-carruth-compliance-consulting-20250303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2025
- Raw hash
- fa75385b8cf4cf4f88019bd38b34e0ce498f97afe2b6bf5e070ef90ab48edbf5
Reporting entity
- Name
- Clackamas Education Service Districtnorm: clackamas education service district
Victim entity
- Name
- Clackamas Education Service Districtnorm: clackamas education service district
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.