HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Danbury Public Schools
bd_8919213874012144 · schema v1 · pii pii-v1
Full breach record for Danbury Public Schools →Danbury Public Schools reported an external system breach (hacking) occurring on July 17, 2023, discovered on July 21, 2023. The incident compromised names and Social Security Numbers of 9,607 individuals, including 7 Maine residents. The school sent written notifications on August 9, 2023, and offered 24 months of identity theft protection services.
Maine clockDiscovered Jul 21, 2023 → Filed with AG Aug 7, 202317d ✓ ME AG ≤30d17 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (3)
- bd_7abd546aca75501bLeak Sitecryptbbfiled 2023-08-01(6d gap)Candidate
- bd_c6483ba1e2f1663eLeak Site8basefiled 2023-07-18(20d gap)Verified by operator
- bd_11f7a9b29e69f749Leak Site8basefiled 2023-07-08(30d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_3342c8452733943bNew Hampshire State AGfiled 2023-08-07Verified
- bd_b427bd725264d7edVermont State AGfiled 2023-09-29(53d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/545bef31-cf84-4c91-880c-9e3bfa93b7cf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 7, 2023
- Raw hash
- ef7e7a9dfba6f5e7bc2938db65b13e5503a3c44f78ecb60058263d14f47745f7
Reporting entity
- Name
- Danbury Public Schoolsnorm: danbury public schools
- Domain
- danbury.k12.ct.us
- Industry
- Education
Victim entity
- Name
- Danbury Public Schoolsnorm: danbury public schools
- Domain
- danbury.k12.ct.us
- Industry
- Education
Incident
- Discovered
- Jul 21, 2023
- Materiality determined
- —
- Notification sent
- Aug 9, 2023
- Affected individuals
- 9,607
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 21, 2023→ Filed with AG: Aug 7, 202317d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.