Social EngineeringEducationEducationPhishingTargetedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

North Beach School District

bd_977909359c077b0c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2018

Filed

Feb 1, 2018

To disclose

≤1 day

Affected

Not disclosed

Confidence

70%

Full breach record for North Beach School District →

North Beach School District notified employees of a phishing scam on Jan 30, 2018. An attacker posing as the superintendent requested employee PII (names, addresses, SSNs, salaries) via email. The district contacted law enforcement and the IRS, and provided credit monitoring services. No banking information was compromised.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · ≤1 day / 1 days

Jan 30, 2018

Begins

Jan 31, 2018

Discovered

Feb 1, 2018

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: North Beach School District
norm: north beach school district
Domain: northbeachschools.org

Name: North Beach School District
norm: north beach school district
Domain: northbeachschools.org
Industry: Educationllm

Discovered: Jan 31, 2018
Breach occurred: Jan 30, 2018
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 1, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: NameSocial Security number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementMet with special agents from the Department of the Treasury Internal Revenue Service Criminal Investigation department
Initial access: phishing_link

During the incident: Contacted law enforcement
Contacted the Internal Revenue Service
Deployed a privacy expert to advise employees on protective measures
Deployed a system for employees to monitor their finances
Provided credit monitoring services through insurance carrier
Changes made: Will provide more staff training on how to identify phishing scams
Partner with ESD and data processing cooperative to identify and implement further preventive measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9765.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2018
Raw hash: b920a963fbcd98993b849809483faccbc2a58b5701cc7a583d24586761009248

Reporting entityNorth Beach School District

Victim entityNorth Beach School District

Incidentdiscovered Jan 31, 2018

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com