MalwareRansomwareTargetedIDENTITY_BASICLowContained
Nashua School District
bd_a42ea78b7e8dde20 · schema v1 · pii pii-v1
Full breach record for Nashua School District →City of Nashua School District notified consumers of a ransomware attack occurring between March 30 and April 28, 2023. The incident involved unauthorized access to systems containing personal information (names). The District engaged third-party specialists, rebuilt its environment, and reported the incident to federal law enforcement. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday44 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 285 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2072f1e4910b73e3Leak Siteblacksuitfiled 2023-05-18(286d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_3df01d72db8cdf60Indiana State AGfiled 2024-02-28Verified
- bd_d356fb91d837912eMontana State AGfiled 2024-02-28Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-28-city-nashua-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2024
- Raw hash
- 011d1de87e81296b8613a4abe793d64a8fb02d3aa7451cfde868da49cb6e3599
Reporting entity
- Name
- Nashua School Districtnorm: nashua school district
- Domain
- nashua.edu
Victim entity
- Name
- Nashua School Districtnorm: nashua school district
- Domain
- nashua.edu
Incident
- Discovered
- Apr 28, 2023
- Materiality determined
- —
- Notification sent
- Feb 28, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying relevant state authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 44 weeks(306 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.