HackingCustomer Data InvolvedLow
Kalamazoo Public School District
bd_99ca09d419e04b37 · schema v1 · pii pii-v1
Full breach record for Kalamazoo Public School District →Kalamazoo Public Schools reported a data breach to the Maine Attorney General after an external system breach was discovered on April 30, 2025. The incident, which occurred the same day, affected two Maine residents. Notification to affected individuals began on July 8, 2025, and the school offered 12 months of identity theft protection services through Epiq.
Maine clockDiscovered Apr 30, 2025 → Filed with AG Jul 8, 202569d ⏱ ME AG >30d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by interlock about this victim predates this filing by 73 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f567ff1c3033890fLeak Siteinterlockfiled 2025-04-26(73d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_180cbfe964e43c95Indiana State AGfiled 2025-07-08Verified
- bd_f5709505866f188cNew Hampshire State AGfiled 2025-07-14(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a227ebae-c41d-4b42-9b3d-742c45724a25.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2025
- Raw hash
- 9c8acafeb3135e719edc6e224603f53fd1677e782be679a5153409584a7c9ccb
Reporting entity
- Name
- Kalamazoo Public School Districtnorm: kalamazoo public school district
- Domain
- kalamazoopublicschools.com
- Industry
- Education
Victim entity
- Name
- Kalamazoo Public School Districtnorm: kalamazoo public school district
- Domain
- kalamazoopublicschools.com
- Industry
- Education
Incident
- Discovered
- Apr 30, 2025
- Materiality determined
- —
- Notification sent
- Jul 8, 2025
- Affected individuals
- 2
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- ME AG >30d · 69dME resident >60d · 69dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 30, 2025→ Filed with AG: Jul 8, 202569d 30 days (soft) ME AG >30d Maine Discovered: Apr 30, 2025→ Notified: Jul 8, 202569d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.