HackingEducationEducationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEducationMediumContained

Indian Springs School District #109

bd_9c287795e0492b98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 29, 2024

Filed

Jul 21, 2025

To disclose

38 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Indian Springs School District #109 →

Indian Springs School District #109 experienced unauthorized access to certain systems on October 29, 2024. The incident potentially affected one New Hampshire resident. Compromised data may include name, date of birth, Social Security number, and education-related information. The district engaged third-party investigators, notified law enforcement, and implemented additional technical safeguards. Affected individuals were notified via mail starting July 14, 2025, and offered complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d38 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 38 weeks / 265 days

Oct 29, 2024

Begins

Oct 29, 2024

Discovered

Jul 21, 2025

Filed

vs. sector median

+29 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_44f125ea9b615fbb2024-11-25 · +237dVerified

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_0b5c722ca31357652025-07-14 · +7dVerified
Nebraska State AGbd_8a13eb7f6ff1b05c2025-07-14 · +7dVerified
Maine State AGbd_9aacdd3a8e2a7ce92025-07-14 · +7dVerified
Illinois State AGbd_8a2c9fe87a2a03502025-07-01 · +20dCandidate

Name: Indian Springs School District #109
norm: indian springs school district 109
Domain: isd109.org

Name: Indian Springs School District #109
norm: indian springs school district 109
Domain: isd109.org
Industry: Educationllm

Discovered: Oct 29, 2024
Breach occurred: Oct 29, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 14, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEducation
Attack vector: Unknown
Threat actor: External

During the incident: Took steps to secure the network
Engaged a third-party firm to investigate the incident
Notified law enforcement
Began providing notice to the potentially impacted individuals on July 14, 2025, via U.S. mail
Offering the potentially impacted individuals complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(265 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJul 1 · first

Indiana State AG+13d

Nebraska State AG+13d

Maine State AG+13d

New Hampshire State AG+20d · this page

Pattern: first filing Jul 1 (IL), last Jul 21 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/indian-springs-school-district-109-20250721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2025
Raw hash: 0e1277dcebbf65f9e198deb098346b06569372169beb9ebf34a122550b7f7eeb

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityIndian Springs School District #109

Victim entityIndian Springs School District #109

Incidentdiscovered Oct 29, 2024

Stated responseTook steps to secure the network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov