HackingEducationEducationStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Reeds Spring R-IV School District

bd_96daf31d2cf1bd01 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 18, 2023

Filed

Oct 20, 2023

To disclose

22 weeks

Affected

1state residents only

Linked

2 filings

Confidence

64%

Full breach record for Reeds Spring R-IV School District →

Reeds Spring R-IV School District notified affected individuals of a data security incident where unauthorized parties may have obtained personal information (names) between April 26 and May 18, 2023. The district discovered the incident on May 18, 2023, engaged external cybersecurity professionals, and is offering complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 22 days

discovery → filing · 22 weeks / 155 days

Apr 26, 2023

Begins

May 18, 2023

Discovered

Oct 20, 2023

Filed

vs. sector median

+14 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekarakurtbd_8369529e75e02dd02023-06-26 · +116dVerified by operator

Name: Reeds Spring R-IV School District
norm: reeds spring r iv school district

Name: Reeds Spring R-IV School District
norm: reeds spring r iv school district
Industry: Educationllm

Discovered: May 18, 2023
Breach occurred: Apr 26, 2023 – May 18, 2023
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Continually evaluate and modify our practices to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(155 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-782.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2023
Raw hash: ba6d9064d957fcbf2e86419ef5a57f0dbb04f84a44fd827f825762a2546b7275

Linked disclosures

Ransomware claims (1)

Reporting entityReeds Spring R-IV School District

Victim entityReeds Spring R-IV School District

Incidentdiscovered May 18, 2023

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov