MalwareEducationEducationRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Judson Independent School District

bd_9d2278c2bb9a4292 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 17, 2021

Filed

Sep 19, 2022

To disclose

15 months

Affected

6state residents only

Linked

2 filings

Confidence

66%

Full breach record for Judson Independent School District →2 incidents on file

Judson Independent School District suffered a ransomware attack on June 17, 2021, resulting in unauthorized access to networks. The incident affected 6 New Hampshire residents, exposing PII including SSNs, DOBs, financial, and medical data. Notifications were mailed on September 12, 2022. JISD engaged forensic investigators, reported to law enforcement, and implemented MFA and AI security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 months / 459 days

Jun 17, 2021

Begins

Jun 17, 2021

Discovered

Sep 19, 2022

Filed

vs. sector median

+57 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_d833316614e0eaa22022-09-12 · +7dVerified

Name: Judson Independent School District
norm: judson independent school district

Name: Judson Independent School District
norm: judson independent school district
Industry: Educationllm

Discovered: Jun 17, 2021
Breach occurred: Jun 17, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 12, 2022
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: reported the attack to federal, state and local law enforcement
Initial access: exploit_public_facing

During the incident: Promptly reported the attack to federal, state and local law enforcement
Engaged a specialized third-party forensic firm
Conducted a forensic investigation
Offered twelve (12) months of complimentary credit and CyberScan monitoring
Offered a $1,000,000 insurance reimbursement policy
Offered identity theft restoration services through IDX
Changes made: Implemented artificial intelligence into their data and server security
Implemented multi-factor authentication into their computer systems and servers
Hardened their internal and external perimeter access points
Adopted control standards recommended by the National Institute of Standards and Technology
Removed access to USB drives and mapped personal drives
Prohibited personal computing devices from being used on or within JISD facilities
Regularly analyze their use of software and devices to ensure software is up to date
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(459 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGSep 12 · first

New Hampshire State AG+7d · this page

Pattern: first filing Sep 12 (IN), last Sep 19 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/judson-independent-school-district-20220919.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2022
Raw hash: bbc9354a9398aad83842ab8619e6f6c036ecba3254e8fa7cc4984cf30b421277

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJudson Independent School District

Victim entityJudson Independent School District

Incidentdiscovered Jun 17, 2021

Stated responsePromptly reported the attack to federal, state and local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov