HackingStolen CredentialsData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
McCall-Donnelly Joint School District No. 421
bd_83fcf743940529da · schema v1 · pii pii-v1
Full breach record for McCall-Donnelly Joint School District No. 421 →McCall-Donnelly School District 421 notified the Idaho Attorney General of a breach involving its PowerSchool SIS provider. An unauthorized party used compromised credentials to access student and teacher data from two tables. The district disabled the connection, engaged forensic investigators (CyberSteward, CrowdStrike), and negotiated data destruction. Credit monitoring and identity protection are being provided.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-10-2025-McCall-Donnelly-Joint-School-District-No.-421.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2025
- Raw hash
- e77b91a71f7821e1bf08f9754cbc8bb965b17226f5af3aa2ef5d910f642efbfc
Reporting entity
- Name
- McCall-Donnelly Joint School District No. 421norm: mccall donnelly joint school district no 421
Victim entity
- Name
- McCall-Donnelly Joint School District No. 421norm: mccall donnelly joint school district no 421
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 8, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Idaho Office of the Attorney General
- Third party
- via PowerSchool
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.