HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Creswell School District
bd_a29a3153b9bc942d · schema v1 · pii pii-v1
Full breach record for Creswell School District →Creswell School District notified the NH Attorney General of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access to personal information occurred on or about Dec 21, 2024. The district discovered the incident on Jan 13, 2025, engaged forensic specialists, notified the FBI, and is offering credit monitoring services to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3d31d2c5a7237dc3Indiana State AGfiled 2025-02-28Verified
- bd_8a3a5687217d59f9Montana State AGfiled 2025-02-28Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/creswell-school-district-carruth-compliance-consulting-20250228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 0ae1e63fbc02526d02e74e32211e74fc21851af7d671fb4a4e5ca2b9483a449d
Reporting entity
- Name
- Creswell School Districtnorm: creswell school district
Victim entity
- Name
- Creswell School Districtnorm: creswell school district
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.