HackingData MishandlingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Cassia County Joint School District No. 151
bd_a2a5e68e80a12b71 · schema v1 · pii pii-v1
Full breach record for Cassia County Joint School District No. 151 →Cassia County Joint School District No. 151 notified the Idaho Attorney General of a cyber breach involving its PowerSchool system. The incident occurred between December 19 and 23, 2024. Teacher and student data, including names, addresses, demographics, medical alerts, and potentially SSNs, were exported. The district states the breach is contained.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-9-2025-Cassia-County-Joint-School-District-No.-151.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2025
- Raw hash
- a1e9d5294ac28bfd5dac1e2b6de9f158305bbbf4698d82e02b7a41b24dee85e0
Reporting entity
- Name
- Cassia County Joint School District No. 151norm: cassia county joint school district no 151
- Domain
- cassiaschools.org
Victim entity
- Name
- Cassia County Joint School District No. 151norm: cassia county joint school district no 151
- Domain
- cassiaschools.org
Incident
- Discovered
- Jan 9, 2025
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Notified Office of the Attorney General
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.