MalwareRansomwareCapture Stored DataData ExfiltratedRansom DemandedSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
School Specialty, Inc.
bd_a132e540a8f718dd · schema v1 · pii pii-v1
Full breach record for School Specialty, Inc. →School Specialty, LLC reported a ransomware incident involving its third-party vendor, The Management Association (MRA). MRA discovered unauthorized access on July 29, 2023, resulting in the exfiltration of employee data. One New Hampshire resident was affected. MRA notified School Specialty on May 14, 2024, and confirmed the scope on June 11, 2024. Notifications were mailed on June 28, 2024, offering credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0453d29007e03a24Montana State AGfiled 2024-06-28Candidate
- bd_4852d0d0680f0547Indiana State AGfiled 2024-06-28Verified
- bd_6727c7043397a7a2Maine State AGfiled 2024-06-28Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/school-specialty-20240628.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 28, 2024
- Raw hash
- 997726fed598d9d9cb4e7ae4e2b6f83c5633923b4f26c1710fafb784530bba02
Reporting entity
- Name
- THE DOCTORS' MANAGEMENT COMPANYnorm: the doctors management
Victim entity
- Name
- School Specialty, Inc.norm: school specialty
Incident
- Discovered
- Jul 29, 2023
- Materiality determined
- Jun 11, 2024
- Notification sent
- Jun 28, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Third party
- via The Management Association
Compliance
- Time to disclose
- 48 weeks(335 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.