HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Butte School District
bd_95f35c604f76b58e · schema v1 · pii pii-v1
Full breach record for Butte School District →Butte School District notified consumers of a cybersecurity incident on November 4, 2023, where an unauthorized actor accessed the network and copied files containing current and former employee data. Impacted data included names, addresses, dates of birth, Social Security numbers, and bank account information for direct deposit recipients. The District engaged forensic specialists, reported the incident to federal law enforcement, and offered 12 months of credit monitoring via Experian.
Vermont clock✗ VT AG >45 bday14 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-19-butte-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2024
- Raw hash
- 3265ac419cae90f62aae4b918bc0b447c7ed8742aca9ac927f33a2538be3bcad
Reporting entity
- Name
- Butte School Districtnorm: butte school district
Victim entity
- Name
- Butte School Districtnorm: butte school district
Incident
- Discovered
- Nov 4, 2023
- Materiality determined
- —
- Notification sent
- Dec 19, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this event to federal law enforcement and government regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 months(411 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.