MalwareEducationEducationRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMediumContained

Williamsburg James City County Schools

bd_9faae1d0e0c9d5fa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 9, 2025

Filed

Mar 3, 2025

To disclose

22 days

Affected

9state residents only

Linked

2 records

Confidence

67%

Williamsburg James City County Schools (WJCC) experienced a ransomware incident on February 9, 2025. The district's technology team detected system disruptions and identified the attack as ransomware. Employee data, including names, addresses, SSNs, driver's license numbers, bank account info, and some medical information, may have been accessed. Student and family data were not impacted. Approximately 9 Maryland residents were affected. WJCC contained the incident, restored systems, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Maryland clock✓ MD AG ≤30d22 days discovery → filing

Incident timeline

discovery → filing · 22 days

Feb 9, 2025

Discovered

Mar 3, 2025

Filed

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitefogbd_f8f93018013ac8012025-03-06 · +3dVerified by operator

Name: Williamsburg James City County Schools
norm: williamsburg james city county schools
Domain: wjccschools.org

Name: Williamsburg James City County Schools
norm: williamsburg james city county schools
Domain: wjccschools.org
Industry: Educationllm

Discovered: Feb 9, 2025
Materiality determined: —
Notification sent: Mar 3, 2025
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Data elements: Date of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Office of the Attorney General

During the incident: Took steps to stop the ransomware
Engaged outside cybersecurity experts
Secured systems and restored to normal
Notified all current students and employees from 2022 through the present
Provided an offer for complimentary credit monitoring
Contacted and is cooperating with law enforcement from the Virginia State Police’s Virginia Fusion Center and the Cybersecurity and Infrastructure Security Agency of Homeland Security
Changes made: Provided free identity monitoring through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: MD AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376472.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2025
Raw hash: 1749ee948172224fb25e30bf172fda9b026404fecabe1348f2ac1bdbb7e3f204

Linked disclosures

Ransomware claims (1)

Reporting entityWilliamsburg James City County Schools

Victim entityWilliamsburg James City County Schools

Incidentdiscovered Feb 9, 2025

Stated responseTook steps to stop the ransomware

ComplianceMD AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov