AccidentalEducationEducationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Mannheim School District 83

bd_905a22658686e2ce · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 29, 2019

Filed

Sep 19, 2019

To disclose

21 days

Affected

1state residents only

Confidence

66%

Full breach record for Mannheim School District 83 →

Mannheim School District 83 notified employees that a backup file containing names and Social Security numbers was inadvertently accessible from the Internet on August 29, 2019. The District secured the system, engaged a cybersecurity firm, and offered one year of identity monitoring via Kroll. No evidence of unauthorized access was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 days

Aug 29, 2019

Discovered

Sep 19, 2019

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Mannheim School District 83
norm: mannheim school district 83

Name: Mannheim School District 83
norm: mannheim school district 83
Industry: Educationllm

Discovered: Aug 29, 2019
Materiality determined: —
Notification sent: Aug 29, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application

During the incident: Sent a letter to staff members whose information was contained on the backup file
Took measures to secure the system containing the file
Requested removal of the web links
Began an investigation with the assistance of a cybersecurity firm
Offering complimentary identity monitoring for one-year through Kroll
Changes made: Investigating the cause of this incident and taking steps to enhance our existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2019
Raw hash: 779477db7288bb0a4a441d6719f27219d5a69bc50efb110d4b896e60722def44

Reporting entityMannheim School District 83

Victim entityMannheim School District 83

Incidentdiscovered Aug 29, 2019

Stated responseSent a letter to staff members whose information was contained on the backup file

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov