UnknownEducationMedium

Reynolds School District

bd_9a19bf069db301a2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 10, 2025

Filed

Mar 12, 2025

To disclose

2 days

Affected

10,102

Linked

9 filings

Confidence

95%

Full breach record for Reynolds School District →

Reynolds School District #7 reported a data breach to the Oregon Attorney General. The breach was reported on 2025-03-12. The breach occurred during 12/21/2024 - 12/21/2024. The breach was discovered on 3/10/2025. 10,102 individuals were affected. Notice was sent on 3/12/2025.

J jump to incidentP pin to compareR raw source

Oregon clock✓ OR AG ≤45d2 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 79 days

discovery → filing · 2 days

Dec 21, 2024

Begins

Mar 10, 2025

Discovered

Mar 12, 2025

Filed

This filing is one of 9 filings about the same incident.View merged incident

Part of Carruth Compliance Consulting supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_1f15ed5a3019f3402025-03-12Verified
Vermont State AGbd_576364560b4ed0e92025-03-12Verified by operator
New Hampshire State AGbd_84fa4a86dd4f34112025-03-12Verified by operator
Vermont State AGbd_ae26c3657413587f2025-03-12Verified by operator

Show 4 more filings ↓up to 1d gap

Massachusetts State AGbd_cb42549ad70c828e2025-03-12Verified by operator
Maryland State AGbd_d9234944dce332492025-03-12Verified by operator
Maine State AGbd_b457c15b71c6d1b72025-03-13 · +1dVerified
Washington State AGbd_cd217e195c3082962025-03-13 · +1dVerified

Name: Reynolds School District
norm: reynolds school district
Domain: reynolds.k12.or.us

Name: Reynolds School District
norm: reynolds school district
Domain: reynolds.k12.or.us

Discovered: Mar 10, 2025
Breach occurred: Dec 21, 2024
Undetected for: 79 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2025
Affected individuals: 10,102nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 2 days(2 days from discovery to filing)
Compliance flags: OR AG ≤45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Indiana State AGMar 12 · first

Vermont State AGMar 12 · first

New Hampshire State AGMar 12 · first

Vermont State AGMar 12 · first

Massachusetts State AGMar 12 · first

Maryland State AGMar 12 · first

Oregon State AGMar 12 · first · this page

Maine State AG+1d

Washington State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2025
Raw hash: c41c04a3fa0540f1edcadb9f377c4a0c3c25ef82fd5b730a689ae5a51212027d

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityReynolds School District

Victim entityReynolds School District

Incidentdiscovered Mar 10, 2025

ComplianceOR AG ≤45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov