HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)HighContained

Pinal County Superintendent's Office

bd_88d4281f6a2b1222 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 25, 2023

Filed

Nov 22, 2023

To disclose

8 weeks

Affected · nationwide

30,09714 in this filing

Linked

6 filings

Confidence

64%

Full breach record for Pinal County Superintendent's Office →

Pinal County Superintendent's Office reported an external system breach (hacking) occurring between September 25-27, 2023. The incident compromised names and Social Security Numbers of 30,097 individuals, including 14 Maine residents. Written notifications were sent on November 22, 2023, offering 24 months of credit monitoring and identity theft insurance through Cyberscout (TransUnion).

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 25, 2023 → Filed with AG Nov 22, 202358d ⏱ ME AG >30d8 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 58 days

Sep 25, 2023

Begins

Sep 25, 2023

Discovered

Nov 22, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_00c3355f8c31f3c12023-11-22Verified
Massachusetts State AGbd_7f192edc85c6bb522023-11-20 · +2dVerified
Montana State AGbd_ed85dfbd614a54fe2023-11-20 · +2dCandidate
South Carolina State AGbd_862e2ba29e59d01f2023-11-27 · +5dVerified

Show 1 more filing ↓up to 5d gap

New Hampshire State AGbd_f720ac9b1ffd5e892023-11-27 · +5dVerified

Name: Pinal County Superintendent's Office
norm: pinal county superintendent s office

Name: Pinal County Superintendent's Office
norm: pinal county superintendent s office
Industry: Governmentllm

Discovered: Sep 25, 2023
Breach occurred: Sep 25, 2023 – Sep 27, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2023
Affected individuals: 30,097state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered credit monitoring and identity theft insurance for 24 months by Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: ME AG >30d · 58d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 25, 2023
→ Filed with AG: Nov 22, 2023
58d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 25, 2023 → Filed with AG: Nov 22, 2023	58d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGNov 20 · first

Montana State AGNov 20 · first

Vermont State AG+2d

Maine State AG+2d · this page

South Carolina State AG+7d

New Hampshire State AG+7d

Pattern: first filing Nov 20 (MA), last Nov 27 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1ca61daa-988b-49c3-a55b-027a8ba38b5d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2023
Raw hash: c816919cf777e6155b9fddf198ad415333479d5d84dcf716dde9ad79c5dc4996

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPinal County Superintendent's Office

Victim entityPinal County Superintendent's Office

Incidentdiscovered Sep 25, 2023

Stated responseSent written notification to affected individuals

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov