HackingEducationEducationStolen CredentialsDelayed DiscoveryIdentity (basic)CredentialsLowContained

Prince George's County Public Schools

bd_aad486a5dc967109 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 14, 2023

Filed

Feb 16, 2024

To disclose

27 weeks

Affected

Not disclosed

Linked

7 records

Confidence

65%

Full breach record for Prince George's County Public Schools →

Prince George's County Public Schools notified consumers of a data breach discovered on August 14, 2023. An unauthorized actor accessed systems between August 3 and 14, 2023, viewing or acquiring data including names and credentials. The incident involved the compromise of valid accounts. The school district engaged forensic specialists and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday27 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 11 days

discovery → filing · 27 weeks / 186 days

Aug 3, 2023

Begins

Aug 14, 2023

Discovered

Jan 16, 2024

Scope determined

Feb 16, 2024

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by rhysida about this victim was first seen 175 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_8ae5e09ce762a9922023-08-14 · +186dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_b45517379abebaaa2024-02-16Verified by operator
Massachusetts State AGbd_e096a863b1d43bee2024-02-16Verified by operator
Indiana State AGbd_08eab472eefc37222024-02-14 · +2dVerified by operator
New Hampshire State AGbd_e614eab3878f05a22024-02-26 · +10dVerified by operator

Press reports (1)

Pressrhysidabd_d6c0f52f7e7c7bba2023-08-14 · +186dCandidate

Name: Prince George's County Public Schools
norm: prince george s county public schools
Domain: pgcps.org
Industry: education

Name: Prince George's County Public Schools
norm: prince george s county public schools
Domain: pgcps.org
Industry: education
Industry: Educationllm

Discovered: Aug 14, 2023
Breach occurred: Aug 3, 2023 – Aug 14, 2023
Undetected for: 11 daysoccurrence → discovery
Materiality determined: Jan 16, 2024
Notification sent: Feb 16, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation with outside forensic specialists
Restore impacted computer systems to operability
Performed a comprehensive review of the impacted data
Implemented additional processes and procedures
Providing you with the opportunity to enroll in ## months of complimentary access to credit monitoring and identity restoration services through Experian IdentityWorks
Changes made: Implemented additional processes and procedures to help prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(186 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 14 · first

Maine State AG+2d

Massachusetts State AG+2d

Vermont State AG+2d · this page

New Hampshire State AG+12d

Pattern: first filing Feb 14 (IN), last Feb 26 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-02-16-prince-george-county-public-schools-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2024
Raw hash: f6f6920b3760f7feeef9c687eeaf9ed366765832361362cc2d15fe58590a0f59

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Press reports (1)

Reporting entityPrince George's County Public Schools

Victim entityPrince George's County Public Schools

Incidentdiscovered Aug 14, 2023

Stated responseLaunched an investigation with outside forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov