MalwareRansomwareSupply Chain (3P Vendor)Ransom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICMediumActive
iSucceed Virtual Schools
bd_8629cf1581c02c41 · schema v1 · pii pii-v1
Full breach record for iSucceed Virtual Schools →iSucceed Virtual Schools, an Idaho online charter school, notified the Idaho Attorney General on January 14, 2025, of a cybersecurity incident involving its third-party vendor, PowerSchool Group LLC. The breach, occurring in December 2024, exposed PII and health data of over 9,000 students and staff. PowerSchool, the service provider, engaged CrowdStrike and CyberSteward, locked down systems, and paid a ransom to the threat actor to prevent data release. iSucceed is notifying affected individuals and cooperating with the investigation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9,000 affectedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-15-2025-iSucceed-Virtual-Schools.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2025
- Raw hash
- 97d0076cebe6fb8eded679350dd0df0d8214ad3922ba445d0562cc1666e950ff
Reporting entity
- Name
- iSucceed Virtual Schoolsnorm: isucceed virtual schools
- Domain
- isucceedvhs.net
Victim entity
- Name
- iSucceed Virtual Schoolsnorm: isucceed virtual schools
- Domain
- isucceedvhs.net
Incident
- Discovered
- Dec 1, 2024
- Materiality determined
- —
- Notification sent
- Jan 14, 2025
- Affected individuals
- 9,000
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Idaho Superintendent of Public InstructionNotified Idaho Attorney General
- Third party
- via PowerSchool Group LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.