HackingCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEDUCATIONMediumContained
Edmonds School District
bd_8fbc9c1b971a5993 · schema v1 · pii pii-v1
Full breach record for Edmonds School District →Edmonds School District reported unauthorized access to its network between Jan 16-31, 2023, discovered on Jan 31, 2023. The incident exposed PII including SSNs, driver's licenses, financial accounts, medical info, and student records. The district engaged forensic specialists, notified law enforcement, and offered credit monitoring. This filing is a supplemental notice to NH residents.
Leak gap clock✗ Leak >180d35 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 248 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_946936f7fcb626adLeak Siteakirafiled 2023-08-24(42d gap)Verified
- bd_a3c1da9ae24ac523Leak Siteakirafiled 2023-01-31(248d gap)Candidate
Regulatory filings (3) · sorted by filing gap
- bd_de1acf46bdc56b2cWashington State AGfiled 2023-10-06Verified
- bd_1b4de5792e8a0263New Hampshire State AGfiled 2023-05-18(141d gap)Verified
- bd_a760a2957dc163faMaine State AGfiled 2023-05-15(144d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/edmonds-school-district-20231006.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2023
- Raw hash
- ea2fd025bbc07b08e2622ea20406998676529668685fa3bc59b71a4d4d04864e
Reporting entity
- Name
- Edmonds School Districtnorm: edmonds school district
- Domain
- edmonds.wednet.edu
Victim entity
- Name
- Edmonds School Districtnorm: edmonds school district
- Domain
- edmonds.wednet.edu
Incident
- Discovered
- Jan 31, 2023
- Materiality determined
- Sep 5, 2023
- Notification sent
- May 15, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEDUCATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProviding written notice of this incident to state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(248 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.